Industrial instrument monitoring data transmission method and system based on data encryption

Abstract

The invention relates to the technical field of industrial data transmission, and discloses an industrial instrument monitoring data transmission method and system based on data encryption, and the method comprises the steps: carrying out the formatting packaging of a real-time monitoring data flow of an industrial instrument, and obtaining a standard to-be-transmitted data frame; performing structured disassembly on the data frame to obtain timestamp information, instrument identification information and monitoring numerical value information; performing multi-dimensional feature coding on the three types of information to obtain content feature vectors; based on a preset strategy mapping table, performing strategy matching mapping on each dimension of characteristic value of the content characteristic vector to obtain an encryption strategy instruction, and performing semantic analysis to obtain a target encryption mode and a key length; in combination with the encryption program of the target encryption mode and the key length, completing key negotiation to obtain a session key, and then performing secret state conversion on the standard to-be-transmitted data frame to obtain an encrypted data packet; according to the invention, the efficiency of industrial instrument monitoring data transmission based on data encryption can be improved.

Description

Technical Field

[0001] This invention relates to the field of industrial data transmission technology, and in particular to a method and system for industrial instrument monitoring data transmission based on data encryption. Background Technology

[0002] Existing industrial instrument monitoring data transmission technologies lack standardized operating procedures in the data processing stage. They fail to perform targeted formatting, encapsulation, and structured decomposition of real-time monitoring data streams, making it impossible to accurately extract timestamp information, instrument identification information, and monitoring value information from the data. This results in subsequent encryption operations lacking effective data feature support, and the encryption processing becoming disconnected from the actual attributes of the monitoring data. Consequently, it is difficult to achieve accurate encryption of the monitoring data, leading to significant technical defects in the fit and accuracy of data transmission encryption.

[0003] The existing design of encryption strategy matching and key generation in industrial instrument monitoring data transmission has technical vulnerabilities. There is no preset strategy mapping mechanism to achieve the adaptation and matching of encryption methods and data characteristics. The selection of encryption strategies lacks data basis. At the same time, key negotiation is not personalized based on the core information of instrument monitoring, the session key lacks uniqueness, and there is no unified standard for the protocol construction of encrypted data packets and policy instructions. This can easily lead to data parsing anomalies during data transmission, significantly reducing the security and transmission efficiency of industrial instrument monitoring data transmission. Therefore, how to improve the security and transmission efficiency of industrial instrument monitoring data transmission has become an urgent problem to be solved. Summary of the Invention

[0004] This invention provides a data transmission method and system for industrial instrument monitoring based on data encryption, in order to solve the problems mentioned in the background art.

[0005] To achieve the above objectives, the present invention provides a data transmission method for industrial instrument monitoring based on data encryption, comprising: S1. The real-time monitoring data stream of the industrial instrument is formatted and encapsulated to obtain the standard data frame to be transmitted by the industrial instrument. S2. The standard data frame to be transmitted is decomposed in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument; S3. Perform multi-dimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument; S4. Based on the preset strategy mapping table, perform strategy matching mapping on the feature values ​​of each dimension in the content feature vector to obtain the encryption strategy instruction of the industrial instrument, and perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. S5. Perform key negotiation between the encryption program of the target encryption method and the key length to obtain the session key of the industrial instrument, and perform cryptographic conversion on the data frame to be transmitted based on the session key and the target encryption method to obtain the encrypted data packet of the industrial instrument. S6. Construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

[0006] In a preferred embodiment, the process of formatting and encapsulating the real-time monitoring data stream of the industrial instrument to obtain a standard data frame to be transmitted includes: Frame synchronization header detection is performed on the real-time monitoring data stream of industrial instruments to obtain the data frame start boundary of the real-time monitoring data stream; Based on the data frame start boundary, the real-time monitoring data stream is parsed to obtain the effective monitoring data payload of the industrial instrument. Industrial frames are constructed from the effective monitoring data payload to obtain the standard data frames to be transmitted from the industrial instruments.

[0007] In a preferred embodiment, the step of structurally decomposing the standard data frame to be transmitted to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument includes: The standard data frame to be transmitted is divided into intervals to obtain the start position and end position of the data field of the standard data frame to be transmitted. Based on the start position and end position of the data field, the standard data frame to be transmitted is segmented to obtain the data field byte stream of the industrial instrument. The data field byte stream is decomposed to obtain the timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment of the industrial instrument; The timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment are reconstructed to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument.

[0008] In a preferred embodiment, the step of performing multi-dimensional feature encoding on the timestamp information, the instrument identification information, and the monitoring value information to obtain the content feature vector of the industrial instrument includes: Perform a time homomorphic transformation on the timestamp information to obtain the standard time characteristic value of the industrial instrument; The instrument identification information is embedded to obtain the identification feature vector element of the industrial instrument; The monitored numerical information is feature-encoded to obtain the monitoring feature elements of the industrial instrument; Based on the original arrangement order in the standard data frame to be transmitted, the standard time feature value, the identification feature vector element and the monitoring feature element are concatenated and assembled to obtain the content feature vector of the industrial instrument.

[0009] In a preferred embodiment, the standard time feature value is calculated using the following formula: ; In the formula, The standard time feature value, is the base of the natural logarithm. The preset time decay coefficient, The current system time of the industrial instrument. The cosine function is a trigonometric function. The timestamp information, For the preset industrial production cycle, The time when the industrial instrument is first put into operation.

[0010] In a preferred embodiment, the step of performing policy matching mapping on the feature values ​​of each dimension in the content feature vector based on a preset policy mapping table to obtain the encryption policy instruction of the industrial instrument, and performing semantic parsing on the encryption policy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted, including: The feature values ​​of each dimension in the content feature vector are concatenated serially to obtain the feature query code of the industrial instrument. Based on the feature query code, a key-value retrieval is performed on the preset strategy mapping table to obtain the encryption strategy instruction of the industrial instrument. The encryption strategy instruction is deserialized to obtain the encryption method identifier field and key length identifier field of the industrial instrument; The encryption method identifier field and the key length identifier field are decoded and converted to obtain the target encryption method and key length of the standard data frame to be transmitted.

[0011] In a preferred embodiment, the deserialization and deconstruction of the encryption strategy instruction to obtain the encryption method identifier field and key length identifier field of the industrial instrument includes: The encryption policy instruction is decoded using metadata to obtain the data structure type of the encryption policy instruction; Based on the data structure type, the encryption strategy instruction is separated into protocol domains to obtain the independent field dataset of the industrial instrument. By performing attribute projection on the independent field dataset, the encryption method identifier field and key length identifier field of the industrial instrument are obtained.

[0012] In a preferred embodiment, the encryption program for the target encryption method negotiates the key length to obtain a session key for the industrial instrument, and based on the session key and the target encryption method, performs cryptographic transformation on the data frame to be transmitted to obtain an encrypted data packet for the industrial instrument, including: The root key of the industrial instrument and the timestamp information are aggregated to obtain the initial key seed of the industrial instrument. The initial key seed is hashed and compressed to obtain the intermediate key material of the industrial instrument; Based on the key length, the intermediate key material is used to perform key derivation to obtain the session key of the industrial instrument; Based on the session key, the data frame to be transmitted is encrypted to obtain the intermediate ciphertext data of the industrial instrument. The intermediate encrypted data is then subjected to message authentication and encapsulation to obtain the encrypted data packet of the industrial instrument.

[0013] In a preferred embodiment, the step of constructing protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and sending the data transmission message to the remote monitoring center of the industrial instrument, includes: Based on the preset message encapsulation format, the encryption policy instruction is structurally stripped to obtain the encryption identifier field and key identifier field of the industrial instrument. Based on the encryption identifier field and the key identifier field, the encrypted data packet is serialized and assembled to obtain the encapsulated message of the industrial instrument; The encapsulated message is processed for transmission adaptation to obtain the data transmission message of the industrial instrument, and the data transmission message is sent to the remote monitoring center of the industrial instrument.

[0014] To address the aforementioned problems, this invention also provides an industrial instrument monitoring data transmission system based on data encryption, the system comprising: The data frame formatting module is used to format and encapsulate the real-time monitoring data stream of the industrial instrument to obtain the standard data frame to be transmitted by the industrial instrument. The structured decomposition module is used to decompose the standard data frame to be transmitted in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument. A multidimensional feature encoding module is used to perform multidimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument. The strategy matching and mapping module is used to perform strategy matching and mapping on the feature values ​​of each dimension in the content feature vector based on a preset strategy mapping table, to obtain the encryption strategy instruction of the industrial instrument, and to perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. The key negotiation encryption module is used to negotiate the encryption program of the target encryption method with the key length to obtain the session key of the industrial instrument, and based on the session key and the target encryption method, to perform cryptographic conversion on the data frame to be transmitted to obtain the encrypted data packet of the industrial instrument. The protocol data construction module is used to construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

[0015] Compared with the prior art, the present invention has the following beneficial effects: 1. This technology standardizes the processing flow of industrial instrument monitoring data. It constructs a standardized frame structure for the monitoring data stream through formatted encapsulation, and then accurately extracts core information such as timestamps, instrument identifiers, and monitoring values ​​through structured decomposition. Relying on multi-dimensional feature encoding, it completes the feature transformation and orderly assembly of various types of information, forming a content feature vector that fits the attributes of the data itself. This improves the completeness and standardization of data feature extraction, provides accurate and comprehensive feature support for subsequent encryption operations, and enhances the adaptability and accuracy of the entire data transmission encryption process from the data source.

[0016] 2. This technology achieves precise matching of encryption strategies and standardized encryption transmission throughout the entire process. Based on a preset strategy mapping table, it completes the adaptation mapping between features and encryption strategies. Combined with semantic parsing, it accurately obtains the target encryption method and key length. In the key negotiation stage, it generates a unique session key through the fusion of multiple information, which improves the security and uniqueness of encryption. After the encryption state conversion, it constructs a standardized protocol for encrypted data packets and strategy instructions to adapt to the technical requirements of remote transmission. This not only improves the encryption security level of industrial instrument monitoring data transmission, but also improves the overall efficiency and parsing accuracy of data transmission. Attached Figure Description

[0017] Figure 1 A flowchart illustrating an industrial instrument monitoring data transmission method based on data encryption, provided in an embodiment of the present invention; Figure 2A functional block diagram of an industrial instrument monitoring data transmission system based on data encryption provided in an embodiment of the present invention; The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0018] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0019] This application provides a data transmission method for industrial instrument monitoring based on data encryption. The execution entity of the data transmission method for industrial instrument monitoring based on data encryption includes, but is not limited to, at least one of the following electronic devices that can be configured to execute the method provided in this application: a server, a terminal, etc. In other words, the data transmission method for industrial instrument monitoring based on data encryption can be executed by software or hardware installed on a terminal device or a server device. The server includes, but is not limited to, a single server, a server cluster, a cloud server, or a cloud server cluster. The server can be an independent server or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms.

[0020] Reference Figure 1 The diagram shown is a flowchart illustrating a data transmission method for industrial instrument monitoring based on data encryption, according to an embodiment of the present invention. In this embodiment, the data transmission method for industrial instrument monitoring based on data encryption includes: S1. The real-time monitoring data stream of the industrial instrument is formatted and encapsulated to obtain the standard data frame to be transmitted by the industrial instrument. In this embodiment of the invention, the process of formatting and encapsulating the real-time monitoring data stream of the industrial instrument to obtain a standard data frame to be transmitted includes: Frame synchronization header detection is performed on the real-time monitoring data stream of industrial instruments to obtain the data frame start boundary of the real-time monitoring data stream; Based on the data frame start boundary, the real-time monitoring data stream is parsed to obtain the effective monitoring data payload of the industrial instrument. Industrial frames are constructed from the effective monitoring data payload to obtain the standard data frames to be transmitted from the industrial instruments.

[0021] The real-time monitoring data stream of the industrial instrument is slid bit by bit in single-byte units and matched with the fixed byte sequence of the frame synchronization header specified by the preset industrial communication protocol. When the number of consecutively matched bytes is exactly the same as the number of bytes in the preset frame synchronization header, the position of the byte after the last byte of the matching sequence is determined as the data frame start boundary of the real-time monitoring data stream.

[0022] Using the determined starting boundary of the real-time monitoring data stream as the parsing start position, the subsequent data stream content is read byte by byte according to the preset industrial instrument data transmission frame structure specification. Non-load data parts such as frame check bits and frame end symbols are accurately removed, and the remaining byte sequence containing only the core data of industrial instrument monitoring is determined as the effective monitoring data payload of the industrial instrument.

[0023] According to the preset industrial communication standard frame format, a frame identifier segment of preset 8 bytes and an address segment of preset 4 bytes are added to the header of the valid monitoring data payload of the acquired industrial instrument, and a frame check segment of preset 2 bytes is added to the tail. The length of each segment follows the fixed numerical requirements of the industrial communication standard. The complete byte sequence after adding each segment is integrated into a continuous frame structure. This complete frame structure is the standard data frame to be transmitted by the industrial instrument.

[0024] The beneficial effects are as follows: by pre-setting a fixed byte sequence to complete the accurate detection of the frame synchronization header, the unique determination of the data frame start boundary is achieved; by relying on the standardized frame structure parsing rules, the effective monitoring data payload is extracted; and then the industrial frame is constructed according to the segment structure of fixed byte length. This allows the real-time monitoring data stream of industrial instruments to form a standardized frame structure that conforms to industrial communication standards, ensuring the integrity, standardization, and uniqueness of the data frame. This provides a unified, identifiable, and formatted data foundation for subsequent technical operations such as the structured disassembly of the data frame, and improves the consistency and accuracy of subsequent processing of industrial instrument monitoring data.

[0025] S2. The standard data frame to be transmitted is decomposed in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument; In this embodiment of the invention, the step of structurally decomposing the standard data frame to be transmitted to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument includes: The standard data frame to be transmitted is divided into intervals to obtain the start position and end position of the data field of the standard data frame to be transmitted. Based on the start position and end position of the data field, the standard data frame to be transmitted is segmented to obtain the data field byte stream of the industrial instrument. The data field byte stream is decomposed to obtain the timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment of the industrial instrument; The timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment are reconstructed to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument.

[0026] According to the preset industrial communication standard frame structure specification, the standard data frame to be transmitted consists of an 8-byte frame identifier segment, a 4-byte address segment, a data field, and a 2-byte check segment in sequence. The physical position of the 13th byte in the frame is determined as the start position of the data field of the standard data frame to be transmitted. According to the fixed byte length of the data field in the preset industrial instrument monitoring data storage specification, the physical position of the byte before the start position of the data field shifted by the corresponding byte length is determined as the end position of the data field of the standard data frame to be transmitted.

[0027] Using the start position of the data field of the standard data frame to be transmitted as the starting point of byte extraction and the end position of the data field as the ending point of byte extraction, all byte contents within the start and end intervals are extracted bit by bit according to the original byte arrangement order of the standard data frame to be transmitted. The extracted continuous and complete byte sequence is retained as a whole, and the retained byte sequence is the data field byte stream of the industrial instrument.

[0028] According to the preset storage rules of industrial instrument monitoring data, the first 8 bytes of the data domain byte stream are the timestamp information storage area, the middle 6 bytes are the instrument identification information storage area, and the remaining bytes are the monitoring value information storage area. The acquired data domain byte stream is divided into continuous and non-overlapping bytes according to the fixed area division rules. The three independent byte sequences obtained after the division are the timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment of the industrial instrument, respectively.

[0029] The timestamp information byte segment is parsed byte by byte according to the general data parsing rules for binary byte-to-industrial time format to restore the corresponding timestamp digital information. The instrument identification information byte segment is parsed byte by byte according to the specific parsing rules for industrial instrument equipment coding to restore the corresponding instrument unique identification information. The monitoring value information byte segment is parsed byte by byte according to the physical quantity parsing rules for industrial instrument monitoring data to restore the corresponding monitoring value physical information. The three types of information obtained after parsing and restoration are the timestamp information, instrument identification information, and monitoring value information of the industrial instrument.

[0030] The beneficial effects are as follows: by setting a frame structure specification with a fixed byte length, the start and end positions of the data field are accurately defined; by relying on the clear start and end intervals, the complete extraction of the data field byte stream is achieved; by dividing the three types of byte segments into non-overlapping direct sums according to the fixed area division of the preset storage rules, the accurate restoration of the byte segments to the actual information is achieved by combining exclusive parsing rules; and the structured disassembly of the standard data frame to be transmitted forms a fixed and reproducible operation process, which ensures the integrity, accuracy and standardization of the parsed timestamp information, instrument identification information and monitoring numerical information. This provides a precise and unified raw data foundation for subsequent multi-dimensional feature encoding of the three types of information, and improves the operational consistency and execution accuracy of subsequent data processing links.

[0031] S3. Perform multi-dimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument; In this embodiment of the invention, the step of performing multi-dimensional feature encoding on the timestamp information, the instrument identification information, and the monitoring value information to obtain the content feature vector of the industrial instrument includes: Perform a time homomorphic transformation on the timestamp information to obtain the standard time characteristic value of the industrial instrument; The instrument identification information is embedded to obtain the identification feature vector element of the industrial instrument; The monitored numerical information is feature-encoded to obtain the monitoring feature elements of the industrial instrument; Based on the original arrangement order in the standard data frame to be transmitted, the standard time feature value, the identification feature vector element and the monitoring feature element are concatenated and assembled to obtain the content feature vector of the industrial instrument.

[0032] The formula for calculating the standard time characteristic value is as follows: ; In the formula, The standard time feature value, is the base of the natural logarithm. The preset time decay coefficient, The current system time of the industrial instrument. The cosine function is a trigonometric function. The timestamp information, For the preset industrial production cycle, The time when the industrial instrument is first put into operation.

[0033] The timestamp information of industrial instruments is converted into a decimal timestamp string according to a preset industrial time standard. Numerical calculations are then performed using a preset formula as the core basis for time homomorphic transformation. As the base of the natural logarithm, we directly use fixed constants from this mathematical field in the calculation. The preset time decay coefficient is determined by statistically analyzing the historical monitoring time data of similar instruments in the industrial field, based on the changing patterns of the time attributes of industrial instrument monitoring data. A specific value is then pre-entered into the system. The current system time of the industrial instrument is acquired in milliseconds by the instrument's built-in real-time clock module and synchronized with the standard time of the industrial site. This value is directly extracted. This refers to the actual time value extracted from the timestamp information obtained after the structured decomposition of a standard data frame to be transmitted. Since it is the cosine function in trigonometric functions, we can directly use this fixed function form in calculations. To pre-set the data entry system based on the fixed time cycle of single-batch production determined by the actual production process in the industrial setting, The initial operation time value extracted from the industrial instrument and equipment archive is fixedly stored for formula calls. Through this formula, various parameters are numerically calculated, and the decimal timestamp string is mapped to a unique value within a fixed range of 0-1000. Then, a homomorphic value transformation process is performed on this value to preserve the time sequence attribute. The single fixed value obtained after this process is the standard time feature value of the industrial instrument. This feature value completely preserves the time sequence attribute of the timestamp information and the time correlation characteristics of the industrial site, becoming the core feature data of the time dimension in the multi-dimensional feature encoding of industrial instruments.

[0034] The instrument identification information of the industrial instrument is converted into a character encoding string according to the preset equipment encoding standard. According to the preset identification feature embedding rules, each character in the character encoding string is mapped to a 16-dimensional binary numerical vector. The binary numerical vectors corresponding to each character are arranged in the original character arrangement order of the instrument identification information. The combined vector structure formed is the identification feature vector element of the industrial instrument.

[0035] The monitoring numerical information of industrial instruments is converted into decimal physical quantity values ​​of preset industrial measurement standards. According to the preset monitoring numerical feature encoding rules, the decimal physical quantity values ​​are mapped into a 32-bit fixed-length numerical sequence. Then, feature conversion processing that preserves the change attribute of the quantity value is performed on the numerical sequence. The single feature unit obtained after this processing is the monitoring feature element of the industrial instrument.

[0036] The original data arrangement order of timestamp information, instrument identification information, and monitoring value information in the standard data frame to be transmitted is retrieved. The standard time feature value obtained by formula calculation is used as the first feature unit, the identification feature vector element is used as the second feature unit, and the monitoring feature element is used as the third feature unit. The three feature units are seamlessly cascaded according to the original arrangement order. The feature combination formed after cascading is converted into a continuous multi-dimensional vector structure. This multi-dimensional vector structure is the content feature vector of the industrial instrument. The formula, through precise numerical calculation, enables the standard time feature value to accurately reflect the time attribute of the industrial instrument monitoring data, providing precise and standardized time dimension feature support for the feature cascading assembly, so that the content feature vector is highly consistent with the actual time attribute of the industrial instrument monitoring data.

[0037] The beneficial effects are as follows: by using preset fixed rules and precise formula calculations, the timestamp information is processed through standardized feature transformation. At the same time, the instrument identification information and monitoring value information are embedded and encoded according to preset rules. Each transformation process maintains the core attributes of the information itself, and the feature cascading assembly strictly follows the original arrangement order of the standard data frame to be transmitted. This allows the final content feature vector to completely, orderly and accurately reflect the original attributes and structural features of the industrial instrument monitoring data. This provides a standardized and accurate feature data foundation for the matching and mapping of subsequent encryption strategies, ensuring the consistency of operation and the accuracy of results in the subsequent feature matching process. In addition, the fixed transformation, calculation and assembly rules make the entire multidimensional feature encoding process reproducible, meet the standardization requirements of industrial instrument data processing, and further improve the integrity and accuracy of multidimensional feature encoding.

[0038] S4. Based on the preset strategy mapping table, perform strategy matching mapping on the feature values ​​of each dimension in the content feature vector to obtain the encryption strategy instruction of the industrial instrument, and perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. In this embodiment of the invention, the step of performing policy matching mapping on the feature values ​​of each dimension in the content feature vector based on a preset policy mapping table to obtain the encryption policy instruction of the industrial instrument, and performing semantic parsing on the encryption policy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted, includes: The feature values ​​of each dimension in the content feature vector are concatenated serially to obtain the feature query code of the industrial instrument. Based on the feature query code, a key-value retrieval is performed on the preset strategy mapping table to obtain the encryption strategy instruction of the industrial instrument. The encryption strategy instruction is deserialized to obtain the encryption method identifier field and key length identifier field of the industrial instrument; The encryption method identifier field and the key length identifier field are decoded and converted to obtain the target encryption method and key length of the standard data frame to be transmitted.

[0039] The deserialization and deconstruction of the encryption strategy instruction yields the encryption method identifier field and key length identifier field of the industrial instrument, including: The encryption policy instruction is decoded using metadata to obtain the data structure type of the encryption policy instruction; Based on the data structure type, the encryption strategy instruction is separated into protocol domains to obtain the independent field dataset of the industrial instrument. By performing attribute projection on the independent field dataset, the encryption method identifier field and key length identifier field of the industrial instrument are obtained.

[0040] The content feature vector of the industrial instrument is arranged in the natural order of its dimensions. Starting from the first feature value and ending at the last feature value, the standardized character representation of each feature value is extracted sequentially. The preset fixed character connector "&" is used as the separator for the character representation of different feature values. All extracted feature value character representations are continuously and uninterruptedly concatenated. The 64-bit fixed-length character sequence formed after concatenation is the feature query code of the industrial instrument.

[0041] The preset strategy mapping table is a key-value pair structured storage table. The key area of ​​the table is the complete character sequence of the feature query code, and the value area is the encryption strategy instruction string corresponding to each key. The obtained complete character sequence of the feature query code is used as the search key, and a full key-value matching search is performed on the key area of ​​the strategy mapping table. When the search key achieves a complete character match with a certain key value in the table, the encryption strategy instruction string corresponding to that key value is extracted. This string is the encryption strategy instruction of the industrial instrument.

[0042] Extract a metadata identifier segment of a preset length of 8 bytes from the beginning of the encryption policy instruction string. This metadata identifier segment is a fixed code specific to the data structure type. Perform a full character-by-character matching between the extracted metadata identifier segment and the preset data structure type code lookup table. If the match is successful, the structure type name corresponding to the code in the lookup table is the data structure type of the encryption policy instruction.

[0043] Based on the data structure type of the acquired encryption policy instruction, a preset protocol field partitioning rule uniquely corresponding to that structure type is retrieved. This rule clearly defines the start and end character positions of each protocol field in the encryption policy instruction string. The complete character content of each protocol field is extracted segment by segment from the encryption policy instruction string according to this rule. After extraction, the character content of each protocol field is organized into a structured unordered dataset according to the extraction order. This dataset is the independent field dataset of the industrial instrument.

[0044] The character content of each protocol field in the independent field dataset is precisely matched with the attribute identifier. The two types of exclusive attribute identifiers, "encryption method" and "key length", are matched. The character content of the protocol field corresponding to the two types of attribute identifiers is extracted from the dataset. The character content that matches the "encryption method" attribute identifier is the encryption method identifier field of the industrial instrument, and the character content that matches the "key length" attribute identifier is the key length identifier field of the industrial instrument.

[0045] The complete character content of the encryption method identifier field is matched character by character with the preset encryption method decoding table. If the match is successful, the specific encryption method name corresponding to the character content in the decoding table is the target encryption method of the standard data frame to be transmitted. The complete character content of the key length identifier field is matched character by character with the preset key length decoding table. If the match is successful, the specific key length value corresponding to the character content in the decoding table is the key length of the standard data frame to be transmitted.

[0046] The beneficial effects are as follows: by forming a unique feature query code through a fixed-order serial concatenation and preset connector, the encryption strategy instructions are accurately extracted by relying on full key-value pair matching retrieval. Then, the data structure type is determined by metadata decoding, and protocol domain separation and attribute projection are completed according to preset rules. Finally, the identification field is accurately converted into actual encryption parameters through a dedicated decoding table. The entire process follows preset fixed rules and matching standards, ensuring the uniqueness and accuracy of the strategy matching mapping and semantic parsing results. This makes the acquisition process of the target encryption method and key length highly reproducible. At the same time, the accurate parsing results provide a highly adaptable encryption parameter foundation for subsequent key negotiation and encrypted state conversion, improving the operational consistency and execution accuracy of the data transmission encryption link of industrial instrument monitoring.

[0047] S5. Perform key negotiation between the encryption program of the target encryption method and the key length to obtain the session key of the industrial instrument, and perform cryptographic conversion on the data frame to be transmitted based on the session key and the target encryption method to obtain the encrypted data packet of the industrial instrument. In this embodiment of the invention, the encryption program for the target encryption method negotiates the key length to obtain the session key of the industrial instrument, and based on the session key and the target encryption method, performs cryptographic transformation on the data frame to be transmitted to obtain the encrypted data packet of the industrial instrument, including: The root key of the industrial instrument and the timestamp information are aggregated to obtain the initial key seed of the industrial instrument. The initial key seed is hashed and compressed to obtain the intermediate key material of the industrial instrument; Based on the key length, the intermediate key material is used to perform key derivation to obtain the session key of the industrial instrument; Based on the session key, the data frame to be transmitted is encrypted to obtain the intermediate ciphertext data of the industrial instrument. The intermediate encrypted data is then subjected to message authentication and encapsulation to obtain the encrypted data packet of the industrial instrument.

[0048] The root key, a pre-programmed 256-bit fixed character sequence, is extracted from the secure storage area of ​​the industrial instrument. The timestamp information obtained from the structured decomposition is converted into a 256-bit character sequence of the same length as the root key. According to the preset bit-to-bit cross-combination rules, each character of the root key character sequence and the timestamp information character sequence is sequentially cross-combined to form a new 256-bit fixed-length continuous character sequence. This character sequence is the initial key seed of the industrial instrument.

[0049] The initial key seed's 256-bit character sequence is divided into 16 segments of equal length, resulting in 16 independent character segments. A preset character bit value conversion operation is performed on each character segment, converting each character in the segment into its corresponding ASCII code decimal value. All converted values ​​are accumulated bit by bit, and the accumulated results are mapped to a preset character set to form a fixed-length character sequence. This 128-bit fixed-length character sequence is the intermediate key material of the industrial instrument.

[0050] Extract the preset number of characters corresponding to the key length obtained through semantic parsing. This number of characters can be any fixed value among 64, 128, and 256. The 128-bit character sequence of the intermediate key material is processed according to the key length requirement. When the key length is 64 bits, the first 64 characters of the intermediate key material are directly extracted. When the key length is 128 bits, the character sequence of the intermediate key material is directly used. When the key length is 256 bits, the first and last characters of the character sequence of the intermediate key material are concatenated to form a 256-bit character sequence. The character sequence that perfectly matches the key length after this processing is the session key of the industrial instrument.

[0051] The character sequence of the standard data frame to be transmitted is divided into blocks of equal length, with the same number of characters as the session key. If the last block of the data frame character sequence does not reach the preset number of characters, a preset fixed padding character is added to the end of the block until it is full. Each data block is replaced character by character with the session key, based on a preset one-to-one mapping table of plaintext and ciphertext characters. After the character replacement of all data blocks is completed, each ciphertext block is continuously spliced ​​together according to the original character arrangement order of the standard data frame to be transmitted. The complete character sequence formed is the intermediate ciphertext data of the industrial instrument.

[0052] A preset 32-bit character segment is extracted from the beginning of the intermediate ciphertext data as the authentication base segment. The authentication base segment is then reversed to obtain the reversed authentication segment. The reversed authentication segment is then directly concatenated to the end of the intermediate ciphertext data. Finally, a preset 16-bit encryption identifier segment is added to the beginning of the concatenated character sequence. This encryption identifier segment is a fixed character sequence that uniquely corresponds to the target encryption method. The complete character sequence formed after this assembly is the encrypted data packet of the industrial instrument.

[0053] The beneficial effects are as follows: Key aggregation combines the industrial instrument's exclusive root key with unique timestamp information, giving the initial key seed dual uniqueness in terms of device and time; hash compression forms standardized intermediate key material through fixed segmentation and transformation rules; key derivation strictly matches the key length requirements obtained from semantic parsing, ensuring a high degree of compatibility between the session key and encryption requirements; encryption transformation achieves the cryptographic transformation of standard data frames to be transmitted according to fixed block and replacement rules; message authentication encapsulation achieves data integrity verification and encryption method identification through the addition of authentication segments and encryption identifier segments; the entire key negotiation and cryptographic transformation process follows preset fixed operation rules, possessing high reproducibility and ensuring the uniqueness and adaptability of the session key, while also making the encrypted data packet both cryptographic and verifiable, providing a secure, standardized, and adaptable ciphertext data foundation for the encrypted transmission of industrial instrument monitoring data, improving the execution accuracy of the encryption link in industrial instrument monitoring data transmission and the encryption security level of data transmission.

[0054] S6. Construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

[0055] In this embodiment of the invention, the step of constructing protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and sending the data transmission message to the remote monitoring center of the industrial instrument, includes: Based on the preset message encapsulation format, the encryption policy instruction is structurally stripped to obtain the encryption identifier field and key identifier field of the industrial instrument. Based on the encryption identifier field and the key identifier field, the encrypted data packet is serialized and assembled to obtain the encapsulated message of the industrial instrument; The encapsulated message is processed for transmission adaptation to obtain the data transmission message of the industrial instrument, and the data transmission message is sent to the remote monitoring center of the industrial instrument.

[0056] The preset message encapsulation format is a fixed field extraction specification in the field of industrial data transmission. This specification clearly defines the fixed length region of the first 16 bits of the encryption policy instruction character sequence corresponding to the encryption identifier field, and the fixed length region of the 17th to 32nd bits of the encryption policy instruction character sequence corresponding to the key identifier field. According to the field position and character length specified by the preset message encapsulation format, the corresponding region of the character content is accurately extracted from the continuous character sequence of the encryption policy instruction. The 16-bit character sequence obtained after extraction is the encryption identifier field of the industrial instrument, and another 16-bit character sequence is the key identifier field of the industrial instrument.

[0057] The extracted encrypted identifier field of the industrial instrument is used as the first character segment of the overall assembly structure, the key identifier field of the industrial instrument is used as the middle character segment of the overall assembly structure, and the encrypted data packet of the industrial instrument is used as the last character segment of the overall assembly structure. The three character segments are continuously spliced ​​without gaps in a fixed order of first, middle, and last. Before splicing, the integrity of the character sequence is checked for each character segment. The conditions for passing the check are that there are no missing characters, no garbled characters, and the total length of the characters is completely consistent with the preset value. After passing the check, the complete character sequence formed by splicing is the encapsulated message of the industrial instrument.

[0058] The frame structure specification corresponding to the preset industrial wireless transmission protocol between the industrial instrument and the remote monitoring center is retrieved. This specification requires adding a 32-bit transmission synchronization segment and a 16-bit device address segment sequentially to the header of the message body, and adding an 8-bit frame check segment to the tail of the message body. Each additional segment is a fixed character sequence that matches the transmission protocol. According to the frame structure specification, the transmission synchronization segment and device address segment are sequentially concatenated at the header of the encapsulated message, and the frame check segment is concatenated at the tail of the encapsulated message. The complete character sequence that conforms to the frame structure requirements of the transmission protocol after concatenation is the data transmission message of the industrial instrument. Through the industrial wireless data transmission module built into the industrial instrument, the data transmission message is directionally sent to the remote monitoring center of the industrial instrument at a preset baud rate of 9600bps. The transmission frequency band of the data transmission module is the industrial-dedicated 433MHz frequency band to ensure the directionality and stability of the message transmission.

[0059] The beneficial effects are as follows: By extracting fixed fields according to preset specifications, the structured stripping of encryption policy instructions is completed, ensuring the uniqueness and reproducibility of the extraction process of encryption identifier fields and key identifier fields. Then, the encapsulated message is constructed according to fixed assembly rules and clear verification standards, ensuring the structural integrity and content accuracy of the encapsulated message. Finally, transmission adaptation processing is completed by combining preset transmission protocol frame structure specifications, setting a standard structure for data transmission messages that meets the requirements of industrial data transmission. At the same time, message transmission is completed according to fixed transmission parameters and dedicated frequency bands, ensuring that the entire protocol data construction and message transmission process follows standardized and fixed operating rules. This not only ensures the standardization and parsability of data transmission messages, but also improves the stability and directionality of message transmission to remote monitoring centers, providing a standard and complete message data foundation for the encrypted remote transmission of industrial instrument monitoring data.

[0060] like Figure 2 The diagram shown is a functional block diagram of an industrial instrument monitoring data transmission system based on data encryption provided in an embodiment of the present invention.

[0061] The data encryption-based industrial instrument monitoring data transmission system 100 of this invention can be installed in an electronic device. Depending on the functions implemented, the data encryption-based industrial instrument monitoring data transmission system 100 may include a data frame formatting module 101, a structured decomposition module 102, a multi-dimensional feature encoding module 103, a strategy matching and mapping module 104, a key negotiation and encryption module 105, and a protocol data construction module 106. The module described in this invention can also be called a unit, which refers to a series of computer program segments that can be executed by the processor of an electronic device and can perform a fixed function, and are stored in the memory of the electronic device.

[0062] In this embodiment, the functions of each module / unit are as follows: The data frame formatting module 101 is used to format and encapsulate the real-time monitoring data stream of the industrial instrument to obtain the standard data frame to be transmitted of the industrial instrument. The structured decomposition module 102 is used to decompose the standard data frame to be transmitted in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument. The multidimensional feature encoding module 103 is used to perform multidimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument. The strategy matching and mapping module 104 is used to perform strategy matching and mapping on the feature values ​​of each dimension in the content feature vector based on a preset strategy mapping table, to obtain the encryption strategy instruction of the industrial instrument, and to perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. The key negotiation encryption module 105 is used to negotiate the encryption program of the target encryption method with the key length to obtain the session key of the industrial instrument, and to perform cryptographic conversion on the data frame to be transmitted based on the session key and the target encryption method to obtain the encrypted data packet of the industrial instrument. The protocol data construction module 106 is used to construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

[0063] In the several embodiments provided by this invention, it should be understood that the disclosed methods and systems can be implemented in other ways. For example, the system embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and other division methods may be used in actual implementation.

[0064] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0065] Furthermore, the functional modules in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional modules.

[0066] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0067] This application embodiment can acquire and process relevant data based on artificial intelligence technology. Artificial intelligence is the theory, method, technology, and application system that uses digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use that knowledge to obtain optimal results.

[0068] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention.

Claims

1. A data transmission method for industrial instrument monitoring based on data encryption, characterized in that, The method includes: S1. The real-time monitoring data stream of the industrial instrument is formatted and encapsulated to obtain the standard data frame to be transmitted by the industrial instrument. S2. The standard data frame to be transmitted is decomposed in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument; S3. Perform multi-dimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument; S4. Based on the preset strategy mapping table, perform strategy matching mapping on the feature values ​​of each dimension in the content feature vector to obtain the encryption strategy instruction of the industrial instrument, and perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. S5. Perform key negotiation between the encryption program of the target encryption method and the key length to obtain the session key of the industrial instrument, and perform cryptographic conversion on the data frame to be transmitted based on the session key and the target encryption method to obtain the encrypted data packet of the industrial instrument. S6. Construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

2. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The process of formatting and encapsulating the real-time monitoring data stream of the industrial instrument to obtain the standard data frame to be transmitted from the industrial instrument includes: Frame synchronization header detection is performed on the real-time monitoring data stream of industrial instruments to obtain the data frame start boundary of the real-time monitoring data stream; Based on the data frame start boundary, the real-time monitoring data stream is parsed to obtain the effective monitoring data payload of the industrial instrument. Industrial frames are constructed from the effective monitoring data payload to obtain the standard data frames to be transmitted from the industrial instruments.

3. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The step of structurally decomposing the standard data frame to be transmitted to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument includes: The standard data frame to be transmitted is divided into intervals to obtain the start position and end position of the data field of the standard data frame to be transmitted. Based on the start position and end position of the data field, the standard data frame to be transmitted is segmented to obtain the data field byte stream of the industrial instrument. The data field byte stream is decomposed to obtain the timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment of the industrial instrument; The timestamp information byte segment, the instrument identification information byte segment, and the monitoring value information byte segment are reconstructed to obtain the timestamp information, instrument identification information, and monitoring value information of the industrial instrument.

4. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The step of performing multi-dimensional feature encoding on the timestamp information, the instrument identification information, and the monitoring value information to obtain the content feature vector of the industrial instrument includes: Perform a time homomorphic transformation on the timestamp information to obtain the standard time characteristic value of the industrial instrument; The instrument identification information is embedded to obtain the identification feature vector element of the industrial instrument; The monitored numerical information is feature-encoded to obtain the monitoring feature elements of the industrial instrument; Based on the original arrangement order in the standard data frame to be transmitted, the standard time feature value, the identification feature vector element and the monitoring feature element are concatenated and assembled to obtain the content feature vector of the industrial instrument.

5. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 4, characterized in that, The formula for calculating the standard time characteristic value is as follows: ； In the formula, The standard time feature value, is the base of the natural logarithm. The preset time decay coefficient, The current system time of the industrial instrument. The cosine function is a trigonometric function. The timestamp information, For the preset industrial production cycle, The time when the industrial instrument is first put into operation.

6. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The method, based on a preset policy mapping table, performs policy matching mapping on the feature values ​​of each dimension in the content feature vector to obtain the encryption policy instruction of the industrial instrument, and performs semantic parsing on the encryption policy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted, including: The feature values ​​of each dimension in the content feature vector are concatenated serially to obtain the feature query code of the industrial instrument. Based on the feature query code, a key-value retrieval is performed on the preset strategy mapping table to obtain the encryption strategy instruction of the industrial instrument. The encryption strategy instruction is deserialized to obtain the encryption method identifier field and key length identifier field of the industrial instrument; The encryption method identifier field and the key length identifier field are decoded and converted to obtain the target encryption method and key length of the standard data frame to be transmitted.

7. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 6, characterized in that, The deserialization and deconstruction of the encryption strategy instruction yields the encryption method identifier field and key length identifier field of the industrial instrument, including: The encryption policy instruction is decoded using metadata to obtain the data structure type of the encryption policy instruction; Based on the data structure type, the encryption strategy instruction is separated into protocol domains to obtain the independent field dataset of the industrial instrument. By performing attribute projection on the independent field dataset, the encryption method identifier field and key length identifier field of the industrial instrument are obtained.

8. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The encryption program for the target encryption method negotiates the key length to obtain the session key of the industrial instrument, and based on the session key and the target encryption method, performs cryptographic transformation on the data frame to be transmitted to obtain the encrypted data packet of the industrial instrument, including: The root key of the industrial instrument and the timestamp information are aggregated to obtain the initial key seed of the industrial instrument. The initial key seed is hashed and compressed to obtain the intermediate key material of the industrial instrument; Based on the key length, the intermediate key material is used to perform key derivation to obtain the session key of the industrial instrument; Based on the session key, the data frame to be transmitted is encrypted to obtain the intermediate ciphertext data of the industrial instrument. The intermediate encrypted data is then subjected to message authentication and encapsulation to obtain the encrypted data packet of the industrial instrument.

9. The data transmission method for industrial instrument monitoring based on data encryption as described in claim 1, characterized in that, The step of constructing protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and sending the data transmission message to the remote monitoring center of the industrial instrument, includes: Based on the preset message encapsulation format, the encryption policy instruction is structurally stripped to obtain the encryption identifier field and key identifier field of the industrial instrument. Based on the encryption identifier field and the key identifier field, the encrypted data packet is serialized and assembled to obtain the encapsulated message of the industrial instrument; The encapsulated message is processed for transmission adaptation to obtain the data transmission message of the industrial instrument, and the data transmission message is sent to the remote monitoring center of the industrial instrument.

10. A data encryption-based industrial instrument monitoring data transmission system, used to implement the data encryption-based industrial instrument monitoring data transmission method of claim 1, the system comprising: The data frame formatting module is used to format and encapsulate the real-time monitoring data stream of the industrial instrument to obtain the standard data frame to be transmitted by the industrial instrument. The structured decomposition module is used to decompose the standard data frame to be transmitted in a structured manner to obtain the timestamp information, instrument identification information and monitoring value information of the industrial instrument. A multidimensional feature encoding module is used to perform multidimensional feature encoding on the timestamp information, the instrument identification information and the monitoring value information to obtain the content feature vector of the industrial instrument. The strategy matching and mapping module is used to perform strategy matching and mapping on the feature values ​​of each dimension in the content feature vector based on a preset strategy mapping table, to obtain the encryption strategy instruction of the industrial instrument, and to perform semantic parsing on the encryption strategy instruction to obtain the target encryption method and key length of the standard data frame to be transmitted. The key negotiation encryption module is used to negotiate the encryption program of the target encryption method with the key length to obtain the session key of the industrial instrument, and based on the session key and the target encryption method, to perform cryptographic conversion on the data frame to be transmitted to obtain the encrypted data packet of the industrial instrument. The protocol data construction module is used to construct protocol data from the encrypted data packet and the encryption policy instruction to obtain the data transmission message of the industrial instrument, and send the data transmission message to the remote monitoring center of the industrial instrument.

Images