Protection control method, device and equipment of natural gas pipeline simulation software and medium

Abstract

The application discloses a natural gas pipeline simulation software protection control method, device, equipment and medium. Its features include: in the case of detecting an access request for a natural gas pipeline simulation software, performing security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy to obtain a security authentication result; in the case of the security authentication result being access safe, starting the natural gas pipeline simulation software through a pre-set software shell code. The application can safely control the natural gas pipeline simulation software, effectively protect the running of the natural gas pipeline simulation software, and prevent threat attacks on the natural gas pipeline simulation software.

Description

Technical Field

[0001] This invention relates to the field of software encryption technology, and in particular to protection and control methods, devices, equipment and media for natural gas pipeline simulation software. Background Technology

[0002] The information systems corresponding to natural gas pipelines face risks from both internal and external threats. Cybersecurity can impact the development work of staff using natural gas pipeline simulation software. Although firewalls and other security products on the development terminals provide peripheral security protection, the information systems themselves contain hidden security vulnerabilities. These vulnerabilities exist in various network devices, operating systems, databases, and application systems, including improper installation and configuration, incorrect parameter configuration, improper use and maintenance, malware injection, unpatched vulnerabilities, misuse of application services and applications, and the opening of unnecessary ports and services. These vulnerabilities can lead to various information security problems, making staff vulnerable to attacks or control when using the natural gas pipeline simulation software. This could result in the theft of important development data, data tampering, and privacy breaches, causing significant economic losses. Summary of the Invention

[0003] This invention provides a protection and control method, device, equipment, and medium for natural gas pipeline simulation software, in order to solve the technical problems of network attacks and network security issues in the use of natural gas pipeline simulation software in the prior art.

[0004] According to one aspect of the present invention, a protection and control method for natural gas pipeline simulation software is provided, comprising:

[0005] Upon detecting an access request to the natural gas pipeline simulation software, the access request and the natural gas pipeline simulation software are authenticated based on a preset software security policy to obtain a security authentication result.

[0006] If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is launched using pre-configured software shell code.

[0007] According to another aspect of the present invention, a protection and control device for natural gas pipeline simulation software is provided, comprising:

[0008] The security authentication module is used to perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy when an access request to the natural gas pipeline simulation software is detected, and to obtain a security authentication result.

[0009] The secure startup module is used to start the natural gas pipeline simulation software through pre-set software shell code when the security authentication result is secure.

[0010] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0011] At least one processor; and

[0012] A memory communicatively connected to the at least one processor; wherein,

[0013] The memory stores a computer program that can be executed by the at least one processor, which enables the at least one processor to execute the protection and control method of the natural gas pipeline simulation software according to any embodiment of the present invention.

[0014] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the protection and control method of the natural gas pipeline simulation software according to any embodiment of the present invention.

[0015] The technical solution of this invention, upon detecting an access request to the natural gas pipeline simulation software, performs security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, obtaining a security authentication result. Before staff start the natural gas pipeline simulation software, security authentication is performed to identify any risks associated with starting the software, effectively improving the operational security of the natural gas pipeline simulation software. If the security authentication result indicates secure access, the natural gas pipeline simulation software is started using pre-set software shell code. This provides secure control over the natural gas pipeline simulation software, effectively protecting its operation and preventing threat attacks during startup. It solves the technical problems of network attacks and network security issues encountered in the use of natural gas pipeline simulation software in existing technologies, providing security protection for the operation of the natural gas pipeline simulation software and preventing dynamic debugging and threat attacks.

[0016] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0018] Figure 1 A flowchart of a protection control method for natural gas pipeline simulation software is provided as an embodiment of the present invention;

[0019] Figure 2 A flowchart of another protection and control method for natural gas pipeline simulation software provided in an embodiment of the present invention;

[0020] Figure 3 A flowchart of another protection and control method for natural gas pipeline simulation software provided in an embodiment of the present invention;

[0021] Figure 4 A schematic diagram of the structure of a protection and control device for a natural gas pipeline simulation software provided in an embodiment of the present invention;

[0022] Figure 5 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. Detailed Implementation

[0023] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0024] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0025] Figure 1This invention provides a flowchart of a protection control method for natural gas pipeline simulation software. This embodiment is applicable to situations where developers use natural gas pipeline simulation software in the information systems of natural gas pipeline network enterprises. The method can be executed by a protection control device for the natural gas pipeline simulation software, which can be implemented in hardware and / or software and can be configured in an electronic device. Figure 1 As shown, the method includes:

[0026] S110. Upon detecting an access request to the natural gas pipeline simulation software, perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, and obtain a security authentication result.

[0027] The natural gas pipeline simulation software can be used by developers to simulate and develop natural gas transmission systems and output development code. It should be noted that the natural gas pipeline simulation software of this invention can be developed by natural gas pipeline network enterprises. The development of the natural gas pipeline simulation software uses a cross-platform framework and a development model that separates the computing core. It supports Windows systems and the Tongxin and Kylin operating systems in the domestic IT innovation environment, and is compatible with access and control of multiple programming languages.

[0028] The access request can be a request to use the natural gas pipeline simulation software. Optionally, the developer selects and launches the natural gas pipeline simulation software in the development terminal, generating an access request for the software. For example, the developer clicks the natural gas pipeline simulation software icon in the development terminal to launch it, and the development terminal generates an access request. The development terminal can be a computer running a domestically developed information technology system and / or a Windows system.

[0029] The preset software security policy can be a pre-set security policy to prevent unauthorized access, tampering, or misuse of the natural gas pipeline simulation software. It should be noted that the preset software security policy mainly includes access control and vulnerability scanning for the natural gas pipeline simulation software. Access control and vulnerability scanning can ensure that the natural gas pipeline simulation software and its data are protected from unauthorized access, tampering, or misuse.

[0030] The security authentication result can be the security evaluation result of the software security policy on the access request. It should be noted that the security authentication result includes two types: access security and access risk. Access security can be an evaluation result indicating that the access request does not involve malicious attacks and that the accessed natural gas pipeline simulation software does not have security vulnerabilities. Access risk can be an evaluation result indicating that the access request involves malicious attacks and / or that the accessed natural gas pipeline simulation software has security vulnerabilities. For example, malicious attacks in the access request could be access verification errors and environment variable errors; security vulnerabilities in the natural gas pipeline simulation software could be file upload vulnerabilities or the presence of spyware.

[0031] Specifically, upon detecting a developer's access request to the natural gas pipeline simulation software on the development terminal, the access request and the natural gas pipeline simulation software are authenticated using a preset software security policy, resulting in a security authentication result.

[0032] Optionally, in another optional embodiment of the present invention, the security authentication of the access request and the natural gas pipeline simulation software based on a preset software security policy to obtain a security authentication result includes:

[0033] Obtain the media access control address of the development terminal corresponding to the access request. If the media access control address is in the preset software management background, then perform a software vulnerability scan on the natural gas pipeline simulation software.

[0034] If no software vulnerability is detected, the security authentication result of the development terminal is returned as secure access.

[0035] If a software vulnerability is detected, the natural gas pipeline simulation software is patched, and the security authentication result of the development terminal is returned as an access risk.

[0036] The Media Access Control Address can be the MAC address of the development terminal.

[0037] Optionally, the software management backend also stores the media access control address of a development terminal that allows the natural gas pipeline simulation software to be launched. When a development terminal requests access to the natural gas pipeline simulation software, the software management backend checks whether the media access control address of the development terminal is stored. If the media access control address of the development terminal is found in the preset software management backend, that is, the media access control address is in the preset software management backend, then the launch of the natural gas pipeline simulation software is allowed.

[0038] Software vulnerability scanning can be performed using a pre-configured vulnerability scanner on the natural gas pipeline simulation software. It should be noted that the vulnerability scanner is embedded within the natural gas pipeline simulation software; when permission to launch the software is detected, the vulnerability scanner is activated to perform a software vulnerability scan.

[0039] Optionally, if the natural gas pipeline simulation software fails to start the vulnerability scanner, the natural gas pipeline simulation software can be stopped from starting.

[0040] In this invention, software vulnerabilities can be used to indicate that the natural gas pipeline simulation software has access risks and requires vulnerability patching. The vulnerability patching can be performed by issuing a version patch through the software management backend.

[0041] Specifically, the system obtains the media access control address of the development terminal corresponding to the access request. If the media access control address is in the preset software management backend, it performs a software vulnerability scan on the natural gas pipeline simulation software. If no software vulnerability is found, it returns a security authentication result of "access secure" to the development terminal. If a software vulnerability is found, it performs software vulnerability repair on the natural gas pipeline simulation software and returns a security authentication result of "access risk" to the development terminal.

[0042] S120. If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is started through the pre-set software shell code.

[0043] The software shell code can be compressed or encrypted and placed outside the natural gas pipeline simulation software. During the runtime of the natural gas pipeline simulation software, the software shell code executes before the original program, responsible for decrypting and / or decompressing the natural gas pipeline simulation software into memory and jumping to the entry point of the natural gas pipeline simulation software for execution. The software shell code can protect the natural gas pipeline simulation software from easy reverse engineering, analysis, or tampering.

[0044] Optionally, the software shell code can compress / encrypt the natural gas pipeline simulation software, and write decryption and / or decompression logic, modifying the entry point of the natural gas pipeline simulation software so that the software shell code of the natural gas pipeline simulation software runs first when the natural gas pipeline simulation software is started.

[0045] Optionally, adding software shell code to the natural gas pipeline simulation software can be done using a corresponding packer tool; alternatively, developers can customize the software shell code using their programming language. Examples of packer tools include ASPack, UPX, and Themida.

[0046] Specifically, if the security authentication result of the access request to the natural gas pipeline simulation software is secure, the natural gas pipeline simulation software is started through pre-set software shell code; if the security authentication result of the access request to the natural gas pipeline simulation software is risky, access to the natural gas pipeline simulation software is denied.

[0047] The technical solution of this invention, upon detecting an access request to the natural gas pipeline simulation software, performs security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, obtaining a security authentication result. Before staff start the natural gas pipeline simulation software, security authentication is performed to identify any risks associated with starting the software, effectively improving the operational security of the natural gas pipeline simulation software. If the security authentication result indicates secure access, the natural gas pipeline simulation software is started using pre-set software shell code. This provides secure control over the natural gas pipeline simulation software, effectively protecting its operation and preventing threat attacks during startup. It solves the technical problems of network attacks and network security issues encountered in the use of natural gas pipeline simulation software in existing technologies, providing security protection for the operation of the natural gas pipeline simulation software and preventing dynamic debugging and threat attacks.

[0048] Figure 2 This is a flowchart illustrating another protection and control method for natural gas pipeline simulation software provided in this embodiment of the invention. The relationship between this embodiment and the above embodiments is that after starting the natural gas pipeline simulation software, the developer logs in and runs the natural gas pipeline simulation software. For example... Figure 2 As shown, the method includes:

[0049] S210. Upon detecting an access request to the natural gas pipeline simulation software, perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, and obtain a security authentication result.

[0050] S220. If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is started through the pre-set software shell code.

[0051] S230. Load the authentication interface of the natural gas pipeline simulation software and display the authentication control.

[0052] The authentication interface can be a developer authentication interface provided by the natural gas pipeline simulation software. Authentication controls can be input controls that allow developers to enter authentication information; the authentication information can be the developer's work information used for authentication. For example, the authentication interface displays two authentication controls: an employee ID control and a group control. The employee ID control prompts the developer to enter their employee ID, and the group control prompts the developer to select their development group. The developer can enter their employee ID in the employee ID control and select their development group in the group control, using their employee ID and development group as the authentication information entered by the developer.

[0053] Specifically, the authentication interface is used to require developers to verify authentication information, and the authentication interface displays authentication controls.

[0054] S240. Verify the authentication information entered by the developer in the authentication control. If the authentication information verification result is successful, load the account login interface of the natural gas pipeline simulation software and display the account login control.

[0055] Optionally, after the authentication control is displayed on the authentication interface, the developer can enter the corresponding authentication information on the authentication control.

[0056] The authentication result can be the result obtained from verifying the authentication information. It should be noted that there are two possible outcomes for verifying a developer's authentication information: successful verification, which allows the authentication control to run; and failed verification, which disallows the authentication control to run.

[0057] The account login interface can be a login interface provided by the natural gas pipeline simulation software for developers. The account login control can be an input control that allows developers to enter their account and password information. The account and password information can be the login information used by developers to log in to the software. For example, the account login interface displays two account login controls: a developer account control and a developer password control. The developer account control prompts for the developer's account, and the developer password control prompts for the developer's account and password. Developers can enter their account and password in the developer account control and the developer password control, respectively.

[0058] Specifically, the developer enters the corresponding authentication information on the authentication control. The authentication information entered by the developer is verified. If the authentication information is successfully verified, the account login interface of the natural gas pipeline simulation software is loaded and the account login control is displayed. If the authentication information fails to be verified, an authentication failure message is returned, requiring the developer to try authentication again.

[0059] Optionally, in this invention, developers are required to use strong password strategies for their account passwords and to set up a multi-factor authentication verification step, using multi-factor authentication information.

[0060] Optionally, in this invention, if the number of authentication failures exceeds a certain failure threshold, the authentication interface is automatically closed, and the natural gas pipeline simulation software is stopped from starting. For example, the failure threshold can be set to 3 times.

[0061] S250. Obtain the account and password information entered by the developer in the account login control, and query the account and password information in the preset software management backend.

[0062] The software management backend can be pre-configured within the natural gas pipeline network's information system to manage the natural gas pipeline simulation software. It should be noted that the software management backend is typically located on a server, allowing development terminals to access it via a local area network (LAN) or wide area network (WAN).

[0063] Optionally, the software management backend provides management functions for the natural gas pipeline simulation software, supporting functions such as administrator management, user management, product management, authorization management, log auditing, and system configuration.

[0064] Optionally, the developer's account and password information can be retrieved using the user management function in the software management backend.

[0065] Specifically, the system obtains the account and password information entered by the developer in the account login control and queries the account and password information in the preset software management backend.

[0066] S260. If the account and password information exists in the software management backend, then run the natural gas pipeline simulation software.

[0067] Optionally, the developer's account and password information can be queried in the user management function of the software management backend. If the account and password information exists in the software management backend, it means that the developer can use the natural gas pipeline simulation software, and the natural gas pipeline simulation software will be run. If the developer's account and password information cannot be found, it means that the developer does not have the permission to use the natural gas pipeline simulation software or that the account and password information is incorrect, and the developer will be prompted to re-enter the account and password information on the account login interface.

[0068] Optionally, in this invention, if a developer fails to run the natural gas pipeline simulation software after repeatedly entering their account and password information, the software management backend queries the contact information corresponding to the developer's work ID and sends a login error communication message to the developer through that contact information. For example, the notification message could be: "Your account with work ID XXXXXX has failed to log in too many times. Please confirm whether it is you operating this system."

[0069] Optionally, in another optional embodiment of the present invention, running the natural gas pipeline simulation software includes:

[0070] The user queries the account permission information in the software management backend based on the account and password information; and runs the natural gas pipeline simulation software based on the account permission information.

[0071] The account permission information refers to the permissions granted to the developer's work ID for the natural gas pipeline simulation software. It should be noted that account permission information can be set by the administrator in the software management backend. Account permission information can include administrator permissions, developer permissions, and no developer permissions. Administrator permissions allow the account to run the natural gas pipeline simulation software and use the software's license management interface to modify information and set permissions for the account using the natural gas pipeline simulation software. Developer permissions allow the account to use the natural gas pipeline simulation software. No developer permissions may deny the account access to the natural gas pipeline simulation software.

[0072] Specifically, the system queries the account permission information in the software management backend based on the developer's account and password information, and then runs the natural gas pipeline simulation software based on the account permission information.

[0073] Optionally, in another optional embodiment of the present invention, running the natural gas pipeline simulation software according to the account permission information includes:

[0074] If the account permission information indicates administrator privileges, the natural gas pipeline simulation software will be run, and the software license management interface of the natural gas pipeline simulation software will be loaded; if the account permission information does not indicate administrator privileges, the natural gas pipeline simulation software will be run.

[0075] The software license management interface can be a software management interface provided by the server to the development terminals. This interface displays functions such as administrator management, user management, product management, license management, log auditing, and system configuration. The administrator management function allows adding and modifying administrators; the user management function can link developer account passwords and authentication information; the product management function can manage version updates of the natural gas pipeline simulation software, periodically and remotely updating the software version on each development terminal; the license management function can set developer account permissions; the log auditing function can record and monitor the entire process of using the natural gas pipeline simulation software on each development terminal, recording the access time and results, authentication and login times and results, and runtime and termination times; the system configuration function can encrypt and assess security risks for the communication of the natural gas pipeline simulation software.

[0076] Specifically, based on the developer's account and password information, the system queries the account permission information in the software management backend. If the account permission information indicates administrator privileges, the system runs the natural gas pipeline simulation software and loads the software license management interface of the natural gas pipeline simulation software. If the account permission information does not indicate administrator privileges, the system runs the natural gas pipeline simulation software.

[0077] The technical solution of this invention performs security authentication on the natural gas pipeline simulation software before staff start it. After the software is started, strong password policies and multi-factor authentication effectively control the developers using the software, preventing external personnel from using it and implanting viruses. This solves the technical problems of network attacks and network security issues in the use of natural gas pipeline simulation software in existing technologies, achieving secure protection for the operation of the software and preventing dynamic debugging and threat attacks.

[0078] Figure 3 This is a flowchart illustrating another protection and control method for natural gas pipeline simulation software provided in this embodiment of the invention. The relationship between this embodiment and the above embodiments is that this involves setting the simulation code security mechanism of the natural gas pipeline simulation software after its use. Figure 3 As shown, the method includes:

[0079] S310. Upon detecting an access request to the natural gas pipeline simulation software, perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, and obtain a security authentication result.

[0080] S320. If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is started through the pre-set software shell code.

[0081] S330. Load the authentication interface of the natural gas pipeline simulation software and display the authentication control.

[0082] S340. Verify the authentication information entered by the developer in the authentication control. If the authentication information verification result is successful, load the account login interface of the natural gas pipeline simulation software and display the account login control.

[0083] S350. Obtain the account and password information entered by the developer in the account login control, and query the account and password information in the preset software management backend.

[0084] S360. If the account and password information exists in the software management backend, then run the natural gas pipeline simulation software.

[0085] S370. In response to the simulation code output request of the natural gas pipeline simulation software, obtain the simulation code to be processed corresponding to the simulation code output request.

[0086] Among them, the simulation code of the natural gas pipeline simulation software can be the simulation model code written by the developers in the natural gas pipeline simulation software.

[0087] Among them, the simulation code output request can be a request from developers to output the simulation code in the natural gas pipeline simulation software to the development terminal.

[0088] The simulation code to be processed can be the simulation code of the natural gas pipeline simulation software exported from the simulation code output request.

[0089] Specifically, developers export simulation code from the natural gas pipeline simulation software to the development terminal, which then retrieves the exported simulation code as simulation code to be processed.

[0090] S380. Obfuscate the simulation code to be processed using a preset code obfuscation method to determine the target simulation code.

[0091] The code obfuscation method can be used to modify the code structure and appearance of the simulation code. It should be noted that the code obfuscation method only changes the code structure or appearance of the simulation code and does not affect its functionality. For example, the default code obfuscation method could be using ProGuard and OLLVM to obfuscate the simulation code, or developers could manually modify the simulation code directly.

[0092] The target simulation code can be obtained by obfuscating the simulation code.

[0093] Specifically, the target simulation code is determined by obfuscating the simulation code to be processed using a preset code obfuscation method.

[0094] Optionally, in another optional embodiment of the present invention, after obfuscating the simulation code to be processed using a preset code obfuscation method to determine the target simulation code, the method further includes:

[0095] In response to the developer's simulation code storage request, obtain the target storage address corresponding to the simulation code storage request;

[0096] The code encryption method is determined based on the target storage address;

[0097] The target simulation code is encrypted using the aforementioned encryption method to determine the encrypted simulation file;

[0098] The encrypted simulation file is stored at the target storage address.

[0099] Among them, the simulation code storage request can be an operation request made by the developer to save the target simulation code in the development terminal.

[0100] The target storage address can be the file address where the developer chooses to store the target simulation code.

[0101] The code encryption method can be a pre-set method for encrypting the target simulation code. It should be noted that in this invention, if the target storage address is a local address of the development terminal, static encryption is used for file encryption; if the target storage address is a remote terminal, an encryption algorithm can be used to encrypt the target simulation code. For example, the encryption algorithm can be AES (Advanced Encryption Standard) and RSA (RSA algorithm).

[0102] The encrypted simulation file can be obtained by encrypting the target simulation code. Developers can decrypt the encrypted simulation file to obtain the target simulation code, and then recover the target simulation code to obtain the simulation code for the natural gas pipeline simulation software.

[0103] Specifically, in response to the developer's simulation code storage request, the development terminal obtains the target storage address corresponding to the simulation code storage request, determines the code encryption method based on the target storage address, encrypts the target simulation code using the encryption method, determines the encrypted simulation file, and stores the encrypted simulation file at the target storage address.

[0104] Figure 4 This is a schematic diagram of the structure of a protection and control device for natural gas pipeline simulation software provided in an embodiment of the present invention. Figure 4 As shown, the device includes: a security authentication module 410 and a secure boot module 420; wherein,

[0105] The security authentication module 410 is used to perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy when an access request to the natural gas pipeline simulation software is detected, and to obtain a security authentication result.

[0106] The secure startup module 420 is used to start the natural gas pipeline simulation software through pre-set software shell code when the security authentication result is secure.

[0107] The technical solution of this invention, upon detecting an access request to the natural gas pipeline simulation software, performs security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy, obtaining a security authentication result. Before staff start the natural gas pipeline simulation software, security authentication is performed to identify any risks associated with starting the software, effectively improving the operational security of the natural gas pipeline simulation software. If the security authentication result indicates secure access, the natural gas pipeline simulation software is started using pre-set software shell code. This provides secure control over the natural gas pipeline simulation software, effectively protecting its operation and preventing threat attacks during startup. It solves the technical problems of network attacks and network security issues encountered in the use of natural gas pipeline simulation software in existing technologies, providing security protection for the operation of the natural gas pipeline simulation software and preventing dynamic debugging and threat attacks.

[0108] Optionally, the device further includes: an identity verification module, an account login module, and an account verification module; wherein,

[0109] The authentication module is used to load the authentication interface of the natural gas pipeline simulation software, display the authentication control, and verify the authentication information entered by the developer in the authentication control.

[0110] The account login module is used to load the account login interface of the natural gas pipeline simulation software and display the account login control if the identity verification result is successful.

[0111] The account verification module is used to obtain the account and password information entered by the developer in the account login control, and query the account and password information in the preset software management backend; if the account and password information exists in the software management backend, the natural gas pipeline simulation software is run.

[0112] Optionally, the account verification module is specifically used for:

[0113] The user queries the account permission information in the software management backend based on the account and password information; and runs the natural gas pipeline simulation software based on the account permission information.

[0114] Optionally, the account verification module is further used for:

[0115] If the account permission information is administrator privileges, then the natural gas pipeline simulation software is run, and the software license management interface of the natural gas pipeline simulation software is loaded;

[0116] If the account permission information is not the administrator permission, then the natural gas pipeline simulation software will be run.

[0117] Optionally, the apparatus further includes: a code output module and a code obfuscation module; wherein,

[0118] The code output module is used to respond to the simulation code output request of the natural gas pipeline simulation software and obtain the simulation code to be processed corresponding to the simulation code output request;

[0119] The code obfuscation module is used to obfuscate the simulation code to be processed using a preset code obfuscation method to determine the target simulation code.

[0120] Optionally, the device further includes: a storage response module, a storage identification module, a code encryption module, and a code storage module; wherein,

[0121] A storage response module is used to respond to a developer's simulation code storage request and obtain the target storage address corresponding to the simulation code storage request.

[0122] The storage identification module is used to determine the code encryption method based on the target storage address;

[0123] The code encryption module is used to encrypt the target simulation code using the encryption method to determine the encrypted simulation file;

[0124] The code storage module is used to store the encrypted simulation file to the target storage address.

[0125] Optionally, the security authentication module 410 is specifically used for:

[0126] Obtain the media access control address of the development terminal corresponding to the access request;

[0127] Obtain the media access control address of the development terminal. If the media access control address is in the preset software management background, then perform a software vulnerability scan on the natural gas pipeline simulation software.

[0128] If no software vulnerability is detected, the security authentication result of the development terminal is returned as secure access.

[0129] If a software vulnerability is detected, the natural gas pipeline simulation software is patched, and the security authentication result of the development terminal is returned as an access risk.

[0130] The protection and control device for the natural gas pipeline simulation software provided in this embodiment of the invention can execute the protection and control method of the natural gas pipeline simulation software provided in any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0131] Figure 5 A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their patterns are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0132] like Figure 5 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 may also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0133] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0134] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as the protection control methods of natural gas pipeline simulation software.

[0135] In some embodiments, the protection control method of the natural gas pipeline simulation software can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the protection control method of the natural gas pipeline simulation software described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to execute the protection control method of the natural gas pipeline simulation software by any other suitable means (e.g., by means of firmware).

[0136] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0137] Computer programs used to implement the methods of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the patterns / operations specified in the flowcharts and / or block diagrams to be implemented. The computer programs can be executed entirely on a machine, partially on a machine, as a standalone software package partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0138] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0139] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0140] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0141] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0142] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0143] This embodiment provides a computer-readable storage medium storing a computer program thereon. When executed by a processor, the program implements the protection and control method steps of the natural gas pipeline simulation software provided in any embodiment of the present invention. The method includes:

[0144] Upon detecting an access request to the natural gas pipeline simulation software, the access request and the natural gas pipeline simulation software are authenticated based on a preset software security policy to obtain a security authentication result.

[0145] If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is launched using pre-configured software shell code.

[0146] The computer storage medium of this invention can be any combination of one or more computer-readable media. A computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. For example, a computer-readable storage medium can be, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0147] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, capable of sending, propagating, or transmitting programs for use by or in connection with an instruction execution system, apparatus, or device.

[0148] Program code contained on a computer-readable medium may be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0149] Computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages—such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0150] Those skilled in the art will understand that the modules or steps of the present invention described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby allowing them to be stored in a storage device for execution by a computing device, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular combination of hardware and software.

[0151] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0152] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A protection and control method for natural gas pipeline simulation software, characterized in that, include: Upon detecting an access request to the natural gas pipeline simulation software, the access request and the natural gas pipeline simulation software are authenticated based on a preset software security policy to obtain a security authentication result. If the security authentication result indicates that access is secure, the natural gas pipeline simulation software is launched using pre-configured software shell code.

2. The method according to claim 1, characterized in that, After the natural gas pipeline simulation software is launched via pre-configured software shell code, the following is also included: The authentication interface of the natural gas pipeline simulation software is loaded, and the authentication controls are displayed. Verify the authentication information entered by the developer in the authentication control. If the authentication information verification result is successful, load the account login interface of the natural gas pipeline simulation software and display the account login control. Obtain the account and password information entered by the developer in the account login control, and query the account and password information in the preset software management backend; If the account and password information exists in the software management backend, then the natural gas pipeline simulation software will be run.

3. The method according to claim 2, characterized in that, The operation of the natural gas pipeline simulation software includes: Based on the account and password information, query the account permission information in the software management backend; The natural gas pipeline simulation software is run according to the account permission information.

4. The method according to claim 3, characterized in that, Running the natural gas pipeline simulation software according to the account permission information includes: If the account permission information is administrator privileges, then the natural gas pipeline simulation software is run, and the software license management interface of the natural gas pipeline simulation software is loaded; If the account permission information is not the administrator permission, then the natural gas pipeline simulation software will be run.

5. The method according to claim 1, characterized in that, After the natural gas pipeline simulation software is launched via pre-set software shell code, the following is also included: In response to the simulation code output request of the natural gas pipeline simulation software, obtain the simulation code to be processed corresponding to the simulation code output request; The simulation code to be processed is obfuscated using a preset code obfuscation method to determine the target simulation code.

6. The method according to claim 5, characterized in that, After obfuscating the simulation code to be processed using a preset code obfuscation method to determine the target simulation code, the process further includes: In response to the developer's simulation code storage request, obtain the target storage address corresponding to the simulation code storage request; The code encryption method is determined based on the target storage address; The target simulation code is encrypted using the aforementioned encryption method to determine the encrypted simulation file; The encrypted simulation file is stored at the target storage address.

7. The method according to claim 1, characterized in that, The access request and the natural gas pipeline simulation software are security authenticated based on a preset software security policy to obtain a security authentication result, including: Obtain the media access control address of the development terminal corresponding to the access request; Obtain the media access control address of the development terminal. If the media access control address is in the preset software management background, then perform a software vulnerability scan on the natural gas pipeline simulation software. If no software vulnerability is detected, the security authentication result of the development terminal is returned as secure access. If a software vulnerability is detected, the natural gas pipeline simulation software is patched, and the security authentication result of the development terminal is returned as an access risk.

8. A protection and control device for natural gas pipeline simulation software, characterized in that, include: The security authentication module is used to perform security authentication on the access request and the natural gas pipeline simulation software based on a preset software security policy when an access request to the natural gas pipeline simulation software is detected, and to obtain a security authentication result. The secure startup module is used to start the natural gas pipeline simulation software through pre-set software shell code when the security authentication result is secure.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to execute the protection and control method of the natural gas pipeline simulation software according to any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a processor, implement the protection and control method of the natural gas pipeline simulation software according to any one of claims 1-7.

Images