Visual channel physical isolation industrial control system cross-zone instruction safe interaction system and method

Abstract

This invention discloses a secure cross-regional command interaction system and method for a visually isolated industrial control system, aiming to solve problems such as complex network gateway configuration, potential risks, incompatibility with outdated protocols, and low visualization in existing technologies. The system includes a command encoding module, a physically isolated display channel, a command capture and execution terminal, and a feedback channel. The method includes generating dynamic command images, transmitting them to the production control area via a split-screen device, capturing and verifying the images, and performing simulated human-machine interaction operations. By adopting the above technical solution, this invention can eliminate the network attack surface, effectively resist replay attacks and content tampering, achieve zero-intrusion integration with existing legacy systems, realize visualized confirmation and complete audit traceability of command execution status, and provide a secure control command exit and status feedback entry for the decision-making platform in the management information area, realizing an intelligent closed loop of "perception-decision-execution-verification".

Description

Technical Field

[0001] This invention relates to the field of industrial control and information security technology, specifically to a cross-regional command secure interaction system and method for a visual channel physically isolated industrial control system. Background Technology

[0002] In critical infrastructure sectors such as energy and water conservancy, industrial control systems generally follow a defense-in-depth architecture of "security zoning, dedicated networks, horizontal isolation, and vertical authentication" to ensure the security of core production control systems. A typical architecture divides the system into a production control zone (Security Zone 1) and a management information zone (Security Zone 3), with cross-zone data exchange via forward or reverse physical isolation devices (gateways). Although the gateway logically severs direct network connections, it still relies on specific communication protocols for data transfer on controlled ports, and its operating mechanism retains limited logical pathways. This design has several drawbacks: First, gateway configuration is complex, posing a potential risk of attack and exploitation due to misconfiguration or unknown vulnerabilities. Second, many industrial control systems use closed, specific, or outdated protocols, making them incompatible with the communication requirements of standardized isolation devices, hindering intelligent upgrades. Furthermore, logs generated by traditional isolation schemes primarily consist of raw network data packets, resulting in low visualization and hindering rapid tracing and problem localization.

[0003] As the demand for intelligent decision-making on the production floor through AI platforms in management information zones continues to grow, three major challenges arise in ensuring the production control zone is completely disconnected from external networks while achieving reliable, trustworthy, and auditable command issuance: 1) How to prevent commands from being intercepted and replayed (replay attacks); 2) How to securely verify execution results after commands are issued; 3) How to adapt to existing systems that only support local human-machine interaction in a non-intrusive manner, avoiding the risks of modification. Current technologies struggle to simultaneously meet the requirements of physical isolation, closed-loop verification, and broad compatibility, necessitating a solution that can completely disconnect from the network, provide dynamic anti-counterfeiting measures, offer visual feedback, and integrate without intrusion. Summary of the Invention

[0004] This invention addresses the shortcomings of existing technologies by providing a cross-regional command security interaction system for a visual channel physically isolated industrial control system. The aim is to achieve reliable, trustworthy, and auditable command issuance while ensuring that the production control area is completely disconnected from the external network.

[0005] To achieve the above objectives, the present invention provides a cross-regional command security interaction system for a visual channel physically isolated industrial control system, comprising:

[0006] The instruction encoding module, located in the management information area, is used to receive operation instructions from the upper-layer application, encrypt and visually encode the instructions, generate a dynamic instruction image containing a dynamic verification code, and output the generated image data to the first display device.

[0007] The physically isolated display channel includes the first display device located in the management information area and the first split-screen device that physically replicates the video signal of the first display device and transmits it unidirectionally to the production control area. The channel is connected to a second display device on the production control area side to present the dynamic command image that is completely synchronized with the first display device.

[0008] An instruction capture and execution terminal, located in the production control area, includes an image acquisition unit, an image decoding and verification unit, and a simulated human-machine interaction unit. The image acquisition unit is used to align with and continuously acquire dynamic instruction images presented on a second display device. The image decoding and verification unit is used to identify and decode the acquired dynamic instruction images, and to perform security verification on the authenticity and integrity of the decoded data. After successful verification, the original control instruction is restored. The simulated human-machine interaction unit is used to generate and execute a series of simulated mouse and keyboard operation sequences based on the restored original control instruction, thereby controlling the target industrial control computer in the production control area to complete the corresponding operations.

[0009] Feedback Channel: Used to confirm the execution status of instructions. The feedback channel includes: a third display device, located in the production control area and connected to the target industrial control computer, for displaying the result interface after instruction execution; a feedback acquisition unit, located in the management information area, for aligning with and acquiring images of the result interface; and a feedback analysis module, located in the management information area, for analyzing the acquired result interface images to confirm the instruction execution status.

[0010] To optimize the above technical solution,

[0011] Furthermore, the dynamic instruction image generated by the instruction encoding module is a text instruction, one-dimensional code, or two-dimensional code superimposed with a dynamic checksum; the dynamic checksum generation process includes introducing a time-synchronized dynamic factor, which is a system timestamp or a pseudo-random sequence generated based on a pre-shared key and a timestamp; the generation function of the dynamic checksum is expressed as follows: Where C is the dynamic checksum, H is the one-way hash function, M is the encrypted instruction ciphertext, T is the timestamp, K is the pre-shared key, and the symbol "||" indicates data concatenation.

[0012] Furthermore, the workflow of the image decoding and verification unit includes: first, preprocessing the acquired image, including grayscale conversion, binarization, denoising, and geometric correction; second, identifying and decoding the encoded regions in the image to extract the encrypted instruction string and the attached dynamic checksum; then, recalculating the expected checksum using the locally stored pre-shared key and the current time window according to the same generation function; finally, comparing the extracted checksum with the expected checksum. If the checksums match and are within the valid time window, the verification is deemed successful; otherwise, the verification is deemed unsuccessful.

[0013] Furthermore, when the image decoding and verification unit fails to verify, it executes a security handling strategy, including: discarding the current instruction image data; generating a local alarm log containing the failure time, failure reason, and image snapshot; and issuing an alarm signal through an audible and visual alarm device.

[0014] Furthermore, the feedback channel includes physically copying the video signal from the third display device through the second split-screen device and transmitting it unidirectionally to the management information area. The channel is connected to a fourth display device on the management information area side, which is used to present an image of the acquisition result interface that is completely synchronized with the third display device.

[0015] This invention also provides a method for secure cross-regional command interaction in a visual channel physically isolated industrial control system, comprising the following steps:

[0016] Step 1: Receive operation instructions from upper-layer applications in the management information area, encrypt and visually encode the instructions, and generate a dynamic instruction image with embedded dynamic verification code;

[0017] Step 2: Display the dynamic instruction image through the first display device on the management information area side, and physically copy and transmit the display signal of the first display device to the second display device in the production control area through the first split-screen device;

[0018] Step 3: In the production control area, the image acquisition unit of the command capture and execution terminal continuously captures the images displayed on the second display device;

[0019] Step 4: Recognize, decode, and perform security verification on the captured image. The verification process includes verifying the timeliness and authenticity of the dynamic verification code.

[0020] Step 5: After verification, the decoded instructions are parsed into a simulated human-machine interaction operation sequence, and the simulated human-machine interaction unit is controlled to execute the operation sequence to operate the target industrial control computer to complete the instructions.

[0021] Step 6: Acquire the screen image of the target industrial control computer after it completes the instruction, and transmit it to the management information area through an independent feedback channel to confirm the execution result.

[0022] Furthermore, in step 1, the visual encoding process introduces a dynamic factor synchronized with time to generate the dynamic instruction image, and the encryption process adopts a symmetric encryption algorithm, using the same key preset in the instruction capture and execution terminal of the management information area and the production control area to encrypt the plaintext of the instruction.

[0023] Furthermore, a third display device connected to the target industrial control computer is provided in the production control area to display the execution result interface; a feedback acquisition unit is provided in the management information area to acquire images of the execution result interface; the acquired images are analyzed by the feedback analysis module to extract key status information and compare it with the expected results, thereby forming a closed-loop confirmation of whether the instruction was successfully executed on the management information side.

[0024] Furthermore, step 5, which involves parsing the decoded instructions into a simulated human-machine interaction sequence, specifically includes: converting the restored original control instructions into a sequence of mouse movement, mouse click, and keyboard input events that simulate human operation through an instruction parser, and sending corresponding control signals to the target industrial control computer through the Universal Serial Bus Human-Machine Interface Device Protocol (USB HID protocol) according to a preset operation interval.

[0025] The present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor executes the computer program to implement the above-mentioned method for secure cross-regional command interaction in a visual channel physically isolated industrial control system.

[0026] The present invention also provides a computer-readable storage medium comprising a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to execute the above-mentioned method for secure cross-regional command interaction of a visual channel physically isolated industrial control system.

[0027] The beneficial effects of this invention are as follows: By setting up a physically isolated display channel and transmitting instructions through pure video signals, this invention completely cuts off the data network connection between Zone 1 and Zone 3, eliminating the risk of network protocol stack attacks from the root and improving security; by adopting a dynamic checksum mechanism, it ensures the uniqueness and timeliness of each instruction, effectively resisting replay attacks and content tampering; by simulating human-computer interaction unit operation, it has no requirements on the software, hardware, brand, or protocol of the underlying industrial control system, and is suitable for zero-intrusion integration into existing and outdated systems; the independent visual feedback channel can transmit the execution result screen back to the management side, realizing visual confirmation and complete audit traceability of the instruction execution status, providing a secure control instruction output and status feedback input for the decision-making platform of the management information area, and realizing an intelligent closed loop of "perception-decision-execution-verification". Attached Figure Description

[0028] Figure 1 This is a schematic diagram of the cross-regional command security interaction system of the visual channel physical isolation industrial control system of the present invention;

[0029] Figure 2 This is a schematic diagram of the instruction security generation and verification mechanism based on dynamic checksum in this invention;

[0030] Figure 3 This is a schematic diagram of the workflow of the instruction capture and execution terminal in this invention;

[0031] Figure 4 This is a flowchart illustrating the cross-regional command security interaction method for a visual channel physically isolated industrial control system in this invention. Detailed Implementation

[0032] The invention will now be described in further detail with reference to the accompanying drawings.

[0033] It should be noted that the terms such as "upper", "lower", "left", "right", "front", and "back" used in the invention are only for clarity of description and are not intended to limit the scope of the invention. Changes or adjustments to their relative relationships, without substantially altering the technical content, should also be considered within the scope of the invention.

[0034] The embodiments described in this invention are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without inventive effort are within the scope of protection of this invention.

[0035] Example 1: In the production control center of a large petrochemical enterprise, the network architecture strictly adheres to the principle of secure partitioning, physically isolating the management information area, which carries upper-level applications such as the Enterprise Resource Planning (ERP) system and the Production Execution System (MES), from the production control area, which directly controls field devices such as reactors, compressors, and pumps. The production control area operates a large number of closed, heterogeneous industrial control computers with outdated operating systems, undertaking critical real-time monitoring and control tasks. To ensure the secure and reliable issuance of control commands from the management information area to the production control area—for example, starting or stopping a production line according to the MES scheduling plan, or adjusting the temperature setpoint of a reactor based on the analysis results of an artificial intelligence platform—while ensuring that no network attack paths are introduced, this example deploys a visual channel-based physically isolated cross-regional command secure interaction system for the industrial control system.

[0036] like Figure 1 As shown, this invention discloses a cross-regional command security interaction system for a visual channel physically isolated industrial control system. The overall architecture includes an instruction encoding module, a first display device, a fourth display device, a feedback acquisition unit, and a feedback analysis module located in the management information area, and an instruction capture and execution terminal, a second display device, a third display device, and a target industrial control computer located in the production control area. The core channel connecting the management information area and the production control area is a physically isolated display channel, which consists of a first display device, a first split-screen device, and a second display device. The first split-screen device is a hardware device whose input is connected to the video output interface of the first display device, and its output is unidirectionally connected to the second display device in the production control area via a dedicated video cable. This device only performs physical-level copying and relay amplification of the video signal and does not have any data packet parsing, storage, or forwarding functions, thus physically ensuring that the signal can only flow unidirectionally from the management information area to the production control area, completely eliminating the possibility of reverse data flow.

[0037] In one implementation, the instruction encoding module is typically deployed as a software service or application on a server or workstation in the management information area. When upper-layer applications, such as manufacturing execution systems or artificial intelligence decision-making platforms, need to issue control instructions to a specific industrial control computer in the production control area, they call the application programming interface (API) provided by this module. The instructions received by this interface are structured strings, such as "Start feed pump P-101 of production line A" or "Adjust the temperature setpoint of reactor R-201 to 185 degrees Celsius." Upon receiving the original instruction string, the module immediately initiates a secure processing procedure. First, encryption is performed using a symmetric encryption algorithm, employing a 256-bit symmetric key pre-stored in the module's internal secure storage area to encrypt the plaintext instruction. This key is identical to the key pre-stored in the instruction capture and execution terminal of the production control area and is pre-distributed and pre-loaded offline to ensure that the key itself is not transmitted over any network channel; the encrypted data is a string of ciphertext.

[0038] In one implementation, to ensure the uniqueness and timeliness of each instruction and to prevent replay attacks, the instruction encoding module then generates a dynamic checksum. See also Figure 2 This process introduces a dynamic factor that is strictly synchronized with the system clock. The module obtains the current system timestamp, accurate to milliseconds, and concatenates it with the ciphertext generated above and another pre-shared authentication key. The authentication key is specifically used for checksum generation to enhance the security layer. The concatenated data is used as input and fed into the 256-bit secure hash algorithm function for calculation. The first 8 hexadecimal bits of the calculated 256-bit hash value are extracted and used as the dynamic checksum for this instruction. The function for generating the dynamic checksum is expressed as follows: Where C is the dynamic checksum, H is the one-way hash function, M is the encrypted instruction ciphertext, T is the timestamp, K is the pre-shared key, and the symbol "||" indicates data concatenation. The process is as follows: the dynamic checksum is equal to the first 8 hexadecimal characters of the result obtained by applying the secure hash algorithm 256 to the concatenated instruction ciphertext, current timestamp, and pre-shared authentication key. These steps ensure that even with the same instruction content, the dynamic checksum generated at different times will be completely different, and the validity of the checksum is strictly constrained by a time window.

[0039] In one implementation, after generating the dynamic checksum, visual encoding begins. This combines the encrypted instruction ciphertext with the newly generated dynamic checksum to form a complete instruction data packet string, with a format such as "DATA: [ciphertext]|CHECKSUM: [dynamic checksum]|TIMESTAMP: [timestamp]". Subsequently, the instruction encoding module encodes this string into a text instruction, a one-dimensional barcode, or a two-dimensional barcode image; in this embodiment, it is encoded as a two-dimensional barcode image. Two-dimensional bars have a large information capacity, strong error tolerance, and are easily processed by standard image recognition algorithms. During the encoding process, an error correction level of 30% is used to ensure correct decoding even if the second display device screen has slight smudges or the image acquisition unit experiences temporary focusing errors. The final generated image is a dynamic instruction image composed of black and white pixels containing the complete instruction data packet, which is pushed in real-time to the first display device designated in the management information area.

[0040] In one implementation, upon receiving a dynamic command image, the first display device displays it in full screen. At this time, the physically isolated display channel begins operation. The high-definition multimedia interface signal output by the first display device is connected to the input port of the first split-screen device. Internally, the first split-screen device uses pure hardware circuitry to duplicate the input signal into two identical signals. One signal remains in the management information area for local monitoring, while the other is transmitted directly to the second display device in the production control area via a dedicated high-definition multimedia interface cable that passes through the physical isolation wall. The second display device displays a dynamic command image that is completely synchronized with the content on the first display device's screen. The entire transmission process involves only the analog or digital copying and transmission of video level signals, without any network protocol involvement, thus eliminating network-based attack vectors at the physical root.

[0041] In one implementation, on the production control area side, the instruction capture and execution terminal is responsible for capturing, parsing, and executing the instruction images presented on the second display device. See also Figure 3 This terminal integrates an image acquisition unit, an image decoding and verification unit, a simulated human-computer interaction unit, and a control motherboard. The image acquisition unit consists of an industrial-grade high-definition camera, which is fixed on a bracket with its lens center precisely aligned with the center area of ​​the second display device's screen to ensure that the entire screen content is within its field of view. The camera continuously acquires screen images at a rate of 30 frames per second and outputs a video stream in RGB format.

[0042] In one implementation, the image decoding and verification unit preprocesses each captured image frame: grayscale conversion, image binarization (using an adaptive threshold algorithm to handle possible changes in screen brightness and ensure accurate differentiation of the black and white areas of the QR code), denoising (using a median filter to eliminate salt-and-pepper noise that may be introduced by the image sensor), and finally geometric correction (by detecting the four positioning patterns of the QR code in the image, calculating the perspective transformation matrix between the screen plane and the camera imaging plane, and applying this matrix to correct the image to eliminate trapezoidal distortion caused by the camera's non-absolute frontal view). The preprocessed image is then used for QR code recognition, locating the QR code area in the image and decoding it to reconstruct the instruction data packet string, such as "DATA: [ciphertext]|CHECKSUM: [dynamic verification code]|TIMESTAMP: [timestamp]". After successful decoding, the security verification step begins. This includes extracting the instruction ciphertext, the sending timestamp, and the received dynamic verification code from the data packet string. Verification first checks timeliness: the unit reads its current system time and compares it with the extracted sending timestamp. In this embodiment, the effective time window is set to ±2 minutes. If the timestamp deviation exceeds 2 minutes, the instruction is immediately deemed expired, and verification fails. If it is within the time window, authenticity verification is performed: the unit uses a locally securely stored pre-shared authentication key, identical to that of the instruction encoding module, combined with the extracted instruction ciphertext and sending timestamp, and recalculates a desired dynamic checksum using the same secure hash algorithm 256 and truncation rules. Subsequently, the calculated desired checksum is compared bit-by-bit with the checksum extracted from the decoded image; only when the two are completely identical is the instruction ultimately deemed to have passed security verification.

[0043] If verification fails, the image decoding and verification unit will immediately activate the security handling strategy. The first step is data discarding: image data of the same command captured in the current frame and subsequent frames will be directly discarded and will not be passed to subsequent units. The second step is logging: the unit generates a structured alarm log in local memory, recording the timestamp of the event, the reason for failure, the hash value of the captured image snapshot, and related decoded data fragments. The third step is local alarm: the terminal's built-in red indicator light begins to flash, and the buzzer emits an intermittent alarm sound, prompting on-site maintenance personnel to immediately intervene and investigate possible causes, such as camera misalignment, screen damage, or malicious replacement of the command image. Only after the command passes all security verifications will the image decoding and verification unit output the verified encrypted command. Internally, the unit uses the same 256-bit symmetric decryption key as the command encoding module to decrypt the encrypted command, restoring the original plaintext control command string, such as "adjust the temperature setpoint of reactor R-201 to 185 degrees Celsius".

[0044] In one implementation, the simulated human-machine interface unit includes a microcontroller that masquerades as a standard keyboard and mouse input device via a Universal Serial Bus (USB) interface. When connected to the USB port of the target industrial control computer, the computer's operating system recognizes it as a regular peripheral. Internally, the unit contains an instruction parser that converts the restored original control instruction string into a precise sequence of mouse and keyboard events simulating human operation. For example, for the instruction "adjust temperature setpoint," the sequence might be parsed as: simulating mouse movement to the temperature setpoint input box, simulating a left mouse click to activate the input box, simulating a keyboard shortcut to select all existing text, simulating the delete key to clear the text, simulating typing the character "185," and finally simulating the Enter key to confirm the input. The unit strictly follows the parsed sequence and preset operation intervals, sending corresponding control signals to the target industrial control computer via the USB HMI protocol, thereby driving the monitoring software on the industrial control computer to modify the setpoint. The entire execution process is identical to manual operation by the operator on the target industrial control computer, thus achieving zero intrusion and requiring no modification to any software or drivers on the industrial control computer.

[0045] To form a complete instruction execution closed loop, this system also establishes an independent feedback channel. In one implementation, after the simulated human-machine interface unit completes the operation sequence, the controlled application interface on the target industrial control computer changes. A third display device is connected to the video output interface of the target industrial control computer to display the result interface. For example, after the temperature setpoint is successfully modified, the setpoint display area on the monitoring software interface will be updated to "185℃". The video signal of the third display device is physically copied through the second split-screen device and transmitted unidirectionally to the fourth display device in the management information area. The fourth display device is used to present the image of the acquisition result interface that is completely synchronized with the third display device. The management information area is equipped with a feedback acquisition unit, which acquires the image of the result interface at a certain period and sends it to the feedback analysis module in the management information area. The entire transmission process only involves the analog or digital copying and transmission of video level signals, without any form of network protocol involvement.

[0046] The feedback analysis module receives these images and performs intelligent analysis. Using optical character recognition (OCR) technology, it extracts text from predefined key areas of the images, such as reading the numbers in the temperature setpoint display area. Then, it uses a template-matching-based image recognition algorithm to determine if the status of a specific button has changed from "unconfirmed" to "confirmed," or if a specific success message dialog box has popped up. The feedback analysis module compares the extracted status information with the expected result of the instruction. If the comparison matches, for example, if the extracted temperature value is 185 and the confirmation button is highlighted, the module determines that the instruction has been successfully executed and sends a "successful execution" confirmation signal to the upper-level application system, while simultaneously archiving the entire log of this instruction interaction. If no expected change is detected or an error message is identified, it determines that execution may have failed and triggers an alarm in the management information area, notifying the administrator to check the execution status on the production control area side. Thus, a complete, secure, and auditable closed loop for cross-regional instruction interaction is achieved, from instruction generation, one-way visual transmission, security verification, simulated execution to result feedback.

[0047] Example 2 illustrates a power dispatch center scenario where an advanced power grid analysis system and a security early warning platform are deployed in the management information area, while the production control area houses an isolated dispatch automation system that directly controls primary equipment such as circuit breakers and disconnect switches in substations. This example utilizes a visual channel physical isolation system to securely transmit fine-grained instructions from the analysis platform to the automation system.

[0048] This embodiment, based on Embodiment 1, enhances the requirements for high real-time performance and high reliability of power commands. When generating dynamic check codes, the command encoding module uses the BeiDou satellite navigation system timing signal as the time synchronization source, ensuring that the time reference deviation between the command capture and execution terminals in the management information area and the production control area is within milliseconds. This compresses the effective time window of the dynamic check code to ±30 seconds, significantly improving the ability to defend against replay attacks. Visual encoding employs a combination of fast response codes and custom positioning patterns, optimizing image recognition speed while maintaining information capacity, keeping the latency from image capture to decoding within 100 milliseconds.

[0049] The physically isolated display channel utilizes high refresh rate industrial displays and low-latency split-screen devices. Both the first and second display devices are 120Hz refresh rate displays, and the split-screen device is a professional-grade zero-latency video distributor. This ensures that the display of dynamic command images on the second display device is virtually latency-free.

[0050] The image acquisition unit of the command capture and execution terminal uses a global shutter industrial camera with a fixed-focus lens to ensure clear screen images are captured even in the strong electromagnetic interference environment of a power room. The image decoding and verification unit integrates a dedicated field-programmable gate array (FPGA) chip, hardware-based image preprocessing, fast response code decoding, and secure hash algorithm 256 calculation, reducing the processing time for a single frame image to less than 20 milliseconds. The simulated human-machine interface unit is deeply adapted to common human-machine interfaces in power dispatch automation systems. Its command parser incorporates multiple preset operation templates for different manufacturers' dispatch software. For example, for the command "Activate longitudinal protection of line L1," the parser not only generates a mouse sequence to click the protection soft pressure plate but also generates a simulated query operation sequence to sequentially check feedback information such as "pressure plate position signal" and "protection device communication status," forming an atomic set of operations. During unit execution, it strictly adheres to the interval requirements of power operation procedures, inserting waiting times ranging from 500 milliseconds to 2 seconds between critical steps to simulate the caution of manual operation and avoid the system misjudging abnormalities due to excessively rapid operations.

[0051] The feedback channel is crucial in this scenario. The third display device shows the main wiring diagram and alarm window of the dispatch automation system. The feedback acquisition unit captures images at a high frame rate, and the analysis module uses real-time video stream analysis technology to not only identify static text but also analyze continuous frames to determine whether the change process of switch symbols is smooth and whether alarm signals return to their origin. Any unexpected graphic state change, such as abnormal blinking of switch symbols, will trigger a high-level alarm within one second and automatically freeze the current image as evidence. All interaction processes, from the timestamps and dynamic check codes generated by the instructions in the management information area to the verification results of the production control area terminal, the simulated operation sequence logs, and the analysis results of the feedback screen, are synchronously recorded in a distributed audit log system based on blockchain technology to ensure the immutability of the logs and meet the highest level of security audit requirements in the power industry.

[0052] The present invention also discloses an electronic device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, it implements the above-described method for secure cross-regional instruction interaction in a visual channel physically isolated industrial control system.

[0053] The present invention also discloses a computer-readable storage medium, including a stored computer program, wherein, when the computer program is running, it controls the device where the computer-readable storage medium is located to execute the above-described method for secure cross-regional command interaction in a visual channel physically isolated industrial control system.

[0054] The above are merely preferred embodiments of the present invention. The scope of protection of the present invention is not limited to the above embodiments. All technical solutions falling within the scope of the present invention's concept are within the scope of protection of the present invention. It should be noted that for those skilled in the art, any improvements and modifications made without departing from the principles of the present invention should be considered within the scope of protection of the present invention.

Claims

1. A cross-regional command secure interaction system for a visual channel physically isolated industrial control system, characterized in that, include: The instruction encoding module, located in the management information area, is used to receive operation instructions from the upper-layer application, encrypt and visually encode the instructions, generate a dynamic instruction image containing a dynamic verification code, and output the generated image data to the first display device. The physically isolated display channel includes the first display device located in the management information area and the first split-screen device that physically copies the video signal of the first display device and transmits it unidirectionally to the production control area. The channel is connected to a second display device on the production control area side to present the dynamic command image that is completely synchronized with the first display device. An instruction capture and execution terminal, located in the production control area, includes an image acquisition unit, an image decoding and verification unit, and a simulated human-machine interaction unit. The image acquisition unit is used to align with and continuously acquire dynamic instruction images presented on a second display device. The image decoding and verification unit is used to identify and decode the acquired dynamic instruction images, and to perform security verification on the authenticity and integrity of the decoded data. After successful verification, the original control instruction is restored. The simulated human-machine interaction unit is used to generate and execute a series of simulated mouse and keyboard operation sequences based on the restored original control instruction, thereby controlling the target industrial control computer in the production control area to complete the corresponding operations. The feedback channel is used to confirm the execution status of the instruction. The feedback channel includes: a third display device, located in the production control area and connected to the target industrial control computer, for displaying the result interface after the instruction is executed; a feedback acquisition unit, located in the management information area, for aligning with and acquiring images of the result interface; and a feedback analysis module, located in the management information area, for analyzing the acquired result interface images to confirm the instruction execution status.

2. The secure interaction system according to claim 1, characterized in that, The dynamic instruction image generated by the instruction encoding module is a text instruction, one-dimensional code, or two-dimensional code superimposed with a dynamic checksum; the dynamic checksum generation process includes introducing a time-synchronized dynamic factor, which is a system timestamp or a pseudo-random sequence generated based on a pre-shared key and a timestamp; the generation function of the dynamic checksum is expressed as follows: Where C is the dynamic checksum, H is the one-way hash function, M is the encrypted instruction ciphertext, T is the timestamp, K is the pre-shared key, and the symbol "||" indicates data concatenation.

3. The secure interaction system according to claim 1, characterized in that, The workflow of the image decoding and verification unit includes: First, preprocessing the acquired image, including grayscale conversion, binarization, denoising, and geometric correction; second, identifying and decoding the encoded regions in the image to extract the encrypted instruction string and the attached dynamic checksum; then, recalculating the expected checksum using the locally stored pre-shared key and the current time window according to the same generation function; finally, comparing the extracted checksum with the expected checksum. If the checksums match and are within the valid time window, the verification is deemed successful; otherwise, the verification is deemed unsuccessful.

4. The secure interaction system according to claim 3, characterized in that, When the image decoding and verification unit fails to verify, it executes a security handling strategy, including: discarding the current instruction image data; generating a local alarm log containing the failure time, failure reason and image snapshot; and issuing an alarm signal through an audible and visual alarm device.

5. The secure interaction system according to claim 1, characterized in that, The feedback channel includes a second split-screen device that physically copies the video signal from the third display device and transmits it unidirectionally to the management information area. A fourth display device is connected to the management information area side of the channel to present an image of the acquisition result interface that is completely synchronized with the third display device.

6. A secure interaction method for a cross-regional command secure interaction system of an industrial control system based on visual channel physical isolation as described in any one of claims 1-5, characterized in that, Includes the following steps: Step 1: Receive operation instructions from upper-layer applications in the management information area, encrypt and visually encode the instructions, and generate a dynamic instruction image with embedded dynamic verification code; Step 2: Display the dynamic instruction image through the first display device on the management information area side, and physically copy and transmit the display signal of the first display device to the second display device in the production control area through the first split-screen device; Step 3: In the production control area, the image acquisition unit of the command capture and execution terminal continuously captures the images displayed on the second display device; Step 4: Recognize, decode, and perform security verification on the captured image. The verification process includes verifying the timeliness and authenticity of the dynamic verification code. Step 5: After verification, the decoded instructions are parsed into a simulated human-machine interaction operation sequence, and the simulated human-machine interaction unit is controlled to execute the operation sequence to operate the target industrial control computer to complete the instructions. Step 6: Acquire the screen image of the target industrial control computer after it completes the instruction, and transmit it to the management information area through an independent feedback channel to confirm the execution result.

7. The method for secure cross-regional command interaction in a visual channel physically isolated industrial control system according to claim 6, characterized in that, In step 1, the visual encoding process introduces a dynamic factor synchronized with time to generate the dynamic instruction image. The encryption process uses a symmetric encryption algorithm and uses the same key preset in the instruction capture and execution terminal of the management information area and the production control area to encrypt the plaintext of the instruction.

8. The method for secure cross-regional command interaction in a visual channel physically isolated industrial control system according to claim 6, characterized in that, A third display device connected to the target industrial control computer is provided in the production control area to display the execution result interface; a feedback acquisition unit is provided in the management information area to acquire images of the execution result interface; The feedback analysis module analyzes the collected images, extracts key status information, and compares it with the expected results, thereby forming a closed-loop confirmation of whether the instruction was successfully executed on the management information side.

9. The method for secure cross-regional command interaction in a visual channel physically isolated industrial control system according to claim 6, characterized in that, Step 5, which involves parsing the decoded instructions into a simulated human-machine interaction sequence, specifically includes: converting the restored original control instructions into a sequence of mouse movement, mouse click, and keyboard input events that simulate human operation through an instruction parser; and sending corresponding control signals to the target industrial control computer through the Universal Serial Bus Human-Machine Interface Device Protocol according to a preset operation interval.

10. A computer-readable storage medium, characterized in that, The system includes a stored computer program, wherein, when the computer program is running, it controls the device containing the computer-readable storage medium to execute the cross-regional command security interaction method for a visual channel physically isolated industrial control system as described in any one of claims 6-9.

Images