A data security protection method and system for remote adjustment and calibration of an internet of things industrial instrument

Abstract

The application discloses a kind of data security protection method and system of remote adjustment and calibration of internet of things industrial instrument, belong to industrial internet of things and industrial instrument remote adjustment and calibration security technical field, comprising: obtaining remote adjustment and calibration request, generates the remote adjustment and calibration intention constraint package containing explicit standard source challenge sequence and implicit perturbation watermark sequence;Acquire field physical response sequence and divide main response area and perturbation witness area;According to main response area, generate candidate calibration parameter, according to perturbation witness area, generate measurement chain living witness abstract;Based on explicit standard source challenge sequence, implicit perturbation watermark sequence, candidate calibration parameter and its generation track, generate candidate parameter source binding information, and after verification, candidate calibration parameter is solidified to formal measurement reference area;After solidification, generate measurement chain living reference blood relationship identification.The application can improve the reliability of remote adjustment and calibration parameter source and the security traceability of subsequent measurement data.

Description

Technical Field

[0001] This invention relates to the fields of industrial Internet of Things (IoT) and remote calibration security technology for industrial instruments, and particularly to a data security protection method and system for remote calibration of IoT industrial instruments. Background Technology

[0002] As industrial field instruments are gradually connected to remote operation and maintenance platforms, parameters such as zero point, range, compensation coefficient, and calibration curve of pressure, flow, temperature, level, and analytical instruments can be remotely adjusted via the network.

[0003] Existing technologies typically focus on communication link encryption, account authorization authentication, calibration command signing, calibration log retention, and parameter range verification to ensure that remote calibration commands are not stolen, tampered with, or replayed during transmission. While these methods improve communication layer security, industrial instrument calibration differs from general remote control operations; its calibration results alter the reference source for subsequent measurement data. If the standard source execution record, instrument response record, and candidate parameter record returned from the field are all generated or forwarded via the same edge link, even if these records match in form, the remote end still finds it difficult to determine whether they have truly undergone physical interaction through the standard source, instrument, and acquisition link.

[0004] Furthermore, introducing physical disturbances to enhance reliability may affect the stable response segments required for calibration calculations, creating a contradiction between security verification and calibration accuracy. Therefore, existing remote calibration security schemes still struggle to simultaneously address the issues of reliable physical sources for candidate calibration parameters, unaffected calibration calculations by disturbances, and traceable benchmarks for subsequent measurement data. Summary of the Invention

[0005] This invention overcomes the shortcomings of the prior art and provides a data security protection method and system for remote calibration of industrial instruments in the Internet of Things.

[0006] To achieve the above objectives, the technical solution adopted by this invention is: a data security protection method for remote calibration of IoT industrial instruments, comprising the following steps:

[0007] S1. Obtain a remote calibration request for the target industrial instrument, and determine the target industrial instrument, the parameter area to be calibrated, and the calibration target type based on the remote calibration request;

[0008] S2. Generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence.

[0009] S3. Generate standard input control information based on the explicit standard source challenge sequence, and superimpose the perturbation input corresponding to the implicit perturbation watermark sequence into at least a portion of the standard input points corresponding to the explicit standard source challenge sequence to obtain the standard input execution result;

[0010] S4. Obtain the field physical response sequence of the target industrial instrument corresponding to the standard input control information and the perturbation input, and generate a sampling time response summary based on the field physical response sequence;

[0011] S5. Divide the on-site physical response sequence into a main response area and a perturbation witness area. The main response area corresponds to the explicit standard source challenge sequence, and the perturbation witness area corresponds to the implicit perturbation watermark sequence. The main response area and the perturbation witness area are isolated from each other in terms of data segments.

[0012] S6. Generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence, and extract perturbation response features from the perturbation witness region to generate a measurement chain live witness summary.

[0013] S7. Generate candidate parameter source binding information based on the explicit standard source challenge sequence, implicit perturbation watermark sequence, sampling time response summary, measurement chain live witness summary, candidate calibration parameters, candidate parameter generation trajectory and current parameter summary of the parameter area to be calibrated;

[0014] S8. Verify the source binding information of the candidate parameters to determine whether the candidate calibration parameters originate from the main response area corresponding to the explicit standard source challenge sequence, and determine whether the measurement chain live witness summary matches the implicit perturbation watermark sequence.

[0015] S9. When the candidate parameter source binding information verification passes, the candidate calibration parameter is fixed to the formal measurement reference area; when the candidate parameter source binding information verification fails, the candidate calibration parameter is prohibited from being written to the formal measurement reference area, and the candidate calibration parameter is cleared.

[0016] S10. After the candidate calibration parameters are solidified into the formal measurement reference area, a measurement chain live reference lineage identifier is generated, and the subsequent measurement data output by the target industrial instrument carries the measurement chain live reference lineage identifier.

[0017] In a preferred embodiment of the present invention, the explicit standard source challenge sequence includes at least three non-contiguous standard input points, the application order of the standard input points, the stability wait condition corresponding to each standard input point, and the sampling window offset;

[0018] The implicit perturbation watermark sequence includes perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window.

[0019] In a preferred embodiment of the present invention, the perturbation amplitude is less than the alarm trigger amplitude of the target industrial instrument and greater than the identification amplitude of the perturbation response feature;

[0020] The perturbation input is used to form an identifiable measurement chain live trace in the field physical response sequence, and the data segment corresponding to the perturbation input does not participate in the generation of candidate calibration parameters.

[0021] In a preferred embodiment of the present invention, in the field physical response sequence corresponding to the same standard input point, the stable response segment after satisfying the stable waiting condition is selected as the main response region, and the response disturbance segment formed after superimposing the perturbation input is selected as the perturbation witness region.

[0022] When generating candidate calibration parameters, the data segments corresponding to the perturbation witness area are excluded.

[0023] In a preferred embodiment of the present invention, candidate calibration parameters are generated based on the response deviation between the main response region and the dominant standard source challenge sequence, including:

[0024] Zero-point offset information, range offset information, and local nonlinear offset information are determined based on the response deviations corresponding to different standard input points.

[0025] Based on the zero-point offset information, range offset information, and local nonlinear offset information, the candidate calibration parameters are generated within the range defined by the calibration amplitude constraint.

[0026] In a preferred embodiment of the present invention, extracting perturbation response features from the perturbation witness region to generate a measurement chain live witness summary includes:

[0027] Extract the response direction features, response arrival time features, response recovery trend features, and perturbation window summary from the perturbation witness area;

[0028] Based on the response direction characteristics, response arrival time characteristics, response recovery trend characteristics, and perturbation window summary, a measurement chain live witness summary is generated to prove the existence of a real physical correlation between the standard input, instrument response, and response acquisition.

[0029] In a preferred embodiment of the present invention, after generating the sampling time response summary, a decimation window for verifying the perturbation response features is determined;

[0030] Extract the target perturbation response features from the data segment corresponding to the response summary at the sampling time according to the extraction window;

[0031] The measurement chain live witness summary is verified based on the matching relationship between the target perturbation response characteristics and the implicit perturbation watermark sequence.

[0032] In a preferred embodiment of the present invention, the verification of the source binding information of the candidate parameters includes:

[0033] Verify the correspondence between the explicit standard source challenge sequence and the main response region;

[0034] Verify the correspondence between the implicit perturbation watermark sequence and the measurement chain live witness summary;

[0035] Verify the correspondence between the candidate parameter generation trajectory and the response deviation of the main response region;

[0036] Verify the inheritance relationship between the candidate tuning parameters and the current parameter summary of the parameter region to be tuned;

[0037] When both the above correspondence and inheritance relationships meet the preset solidification conditions, the verification of the candidate parameter source binding information is confirmed to be successful.

[0038] In a preferred embodiment of the present invention, when the measurement chain live reference lineage identifier carried by the subsequent measurement data does not match the binding information of the most recent candidate parameter source, the subsequent measurement data is marked as untrusted measurement data, and the untrusted measurement data is restricted from entering the subsequent remote calibration closed loop.

[0039] A data security protection system for remote calibration of industrial instruments via the Internet of Things includes:

[0040] The remote calibration constraint generation module is used to generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence.

[0041] A standard input control module is used to generate standard input control information based on the explicit standard source challenge sequence, and to superimpose perturbation inputs corresponding to the implicit perturbation watermark sequence in at least a portion of the standard input points;

[0042] The response acquisition module is used to acquire the field physical response sequence corresponding to the target industrial instrument and generate a response summary at the sampling time.

[0043] The constrained calibration module is used to divide the field physical response sequence into a main response region and a perturbation witness region, and generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence.

[0044] A separate sampling witness module is used to extract perturbation response features from the perturbation witness region and generate a measurement chain live witness summary;

[0045] The source binding module is used to generate candidate parameter source binding information based on the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the sampling time response summary, the measurement chain live witness summary, the candidate calibration parameters, the candidate parameter generation trajectory, and the current parameter summary of the parameter area to be calibrated.

[0046] The gated solidification module is used to verify the source binding information of the candidate parameters, and solidify the candidate calibration parameters to the formal measurement reference area when the verification is successful;

[0047] The lineage output module is used to generate a measurement chain live reference lineage identifier after the candidate calibration parameters are solidified into the formal measurement reference area, and to make subsequent measurement data carry the measurement chain live reference lineage identifier.

[0048] This invention addresses the shortcomings of the prior art and has the following beneficial effects:

[0049] (1) By setting explicit standard source challenge sequence, implicit perturbation watermark sequence, main response area, perturbation witness area and candidate parameter source binding information, the present invention enables remote calibration to no longer rely on the remote end to directly issue specific calibration parameters, but to make the candidate calibration parameters originate from the real physical response and be solidified after being witnessed by a live entity, directly preventing the pollution of the formal measurement benchmark by forged parameters in legitimate sessions; compared with the existing methods that rely only on authentication, encryption and log auditing, it further improves the reliability of the measurement benchmark and the strength of data security protection in the remote calibration process.

[0050] (2) This invention uses explicit standard source challenge sequences to generate candidate calibration parameters and implicit perturbation watermark sequences to prove the liveness of the measurement chain, thus separating calibration calculation and security witnessing. This directly avoids perturbation inputs from participating in the calculation of candidate calibration parameters and affecting calibration accuracy. Compared with existing single standard source calibration or single challenge response certification methods, this invention further solves the technical contradiction of proving the existence of a real measurement chain while maintaining the accuracy of calibration results.

[0051] (3) The present invention forms candidate parameter source binding information by combining the sampling time response summary, the measurement chain live witness summary and the candidate parameter generation trajectory. This makes the solidification conditions of the formal measurement benchmark area no longer depend solely on account permissions, parameter range and signature integrity, but on whether the candidate calibration parameters originate from the main response area of ​​this explicit challenge and the implicit micro-perturbation witness area, directly reducing the risk of falsifying evidence for consistency at the on-site edge link. Compared with the existing post-audit methods, it further improves the pre-calibration control capability.

[0052] (4) This invention generates a live reference lineage identifier for the measurement chain after the candidate calibration parameters are solidified, and makes the subsequent measurement data carry the identifier, so that the security protection of remote calibration is extended from the single parameter writing to the subsequent measurement data output process, and the continuous association between the measurement data and its measurement reference source is directly realized. Compared with the existing method of only recording calibration logs, it further enables the subsequent measurement data to be judged based on the lineage identifier, thereby improving the continuous security of remote operation and maintenance of industrial instruments. Attached Figure Description

[0053] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0054] Figure 1 This is a flowchart of a data security protection method for remote calibration of IoT industrial instruments according to the present invention;

[0055] Figure 2 This is a structural block diagram of a data security protection system for remote calibration of industrial instruments using the Internet of Things (IoT) according to the present invention. Detailed Implementation

[0056] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0057] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein. Therefore, the scope of protection of the invention is not limited to the specific embodiments disclosed below.

[0058] Example 1:

[0059] Figure 1 A flowchart illustrating a data security protection method for remote calibration of IoT industrial instruments provided in an embodiment of the present invention.

[0060] The data security protection method for remote calibration of IoT industrial instruments mentioned above includes the following steps:

[0061] S1. Obtain the remote calibration request for the target industrial instrument, and determine the target industrial instrument, the parameter area to be calibrated, and the calibration target type based on the remote calibration request.

[0062] S2. Generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence.

[0063] S3. Generate standard input control information based on the explicit standard source challenge sequence, and superimpose the perturbation input corresponding to the implicit perturbation watermark sequence into at least some standard input points corresponding to the explicit standard source challenge sequence to obtain the standard input execution result.

[0064] S4. Obtain the field physical response sequence of the target industrial instrument corresponding to the standard input control information and the perturbation input, and generate a sampling time response summary based on the field physical response sequence.

[0065] S5. Divide the on-site physical response sequence into a main response area and a perturbation witness area. The main response area corresponds to the explicit standard source challenge sequence, and the perturbation witness area corresponds to the implicit perturbation watermark sequence. The main response area and the perturbation witness area are isolated in terms of data segments.

[0066] S6. Generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence, and extract perturbation response features from the perturbation witness region to generate a measurement chain live witness summary.

[0067] S7. Generate candidate parameter source binding information based on the explicit standard source challenge sequence, implicit perturbation watermark sequence, sampling time response summary, measurement chain live witness summary, candidate calibration parameters, candidate parameter generation trajectory, and current parameter summary of the parameter area to be calibrated.

[0068] S8. Verify the source binding information of the candidate parameters to determine whether the candidate calibration parameters come from the main response area corresponding to the explicit standard source challenge sequence, and determine whether the measurement chain live witness summary matches the implicit perturbation watermark sequence.

[0069] S9. When the candidate parameter source binding information verification passes, the candidate calibration parameters are fixed to the formal measurement reference area; when the candidate parameter source binding information verification fails, the candidate calibration parameters are prohibited from being written to the formal measurement reference area, and the candidate calibration parameters are cleared.

[0070] S10. After the candidate calibration parameters are fixed to the formal measurement reference area, a measurement chain live reference lineage identifier is generated, and the subsequent measurement data output by the target industrial instrument carries the measurement chain live reference lineage identifier.

[0071] The key challenge in implementing the above method is that remote calibration of industrial instruments requires that the response data reflect the actual results of the standard source, that the candidate calibration parameters are not contaminated by perturbation inputs, and that the remote end can identify the risk of the field edge link forging standard source execution records, instrument response records and candidate parameter records with the same form. Therefore, it is necessary to complete the physical source verification, calibration accuracy maintenance and subsequent measurement data benchmark traceability in the same remote calibration process.

[0072] The above method combines explicit standard source challenge sequences and implicit perturbation watermark sequences, so that the remote calibration process no longer relies solely on the integrity of instructions and the legitimacy of permissions at the communication layer. Instead, it puts the current standard input, the target industrial instrument response, response acquisition, candidate calibration parameter generation, and the solidification of the formal measurement reference area into the same source binding link. This makes it more difficult for forged parameters, copied historical responses, tampered edge records, and parameters written outside the real measurement chain within a legitimate session to pass the candidate parameter source binding information verification.

[0073] Example 2:

[0074] For step S1, in engineering terms, it can be understood that after the remote operation and maintenance platform receives a calibration task for a target industrial instrument, it first parses the specific industrial instrument to be operated, the parameter area to be written or updated, and the calibration target type to which the calibration purpose belongs from the remote calibration request. The above three types of information are used as the basis for the subsequent generation of remote calibration intent constraint package, standard input execution, and candidate parameter solidification judgment.

[0075] The target industrial instrument refers to the field instrument device to which this remote calibration request is directed. The target industrial instrument has attribute information such as device identification, instrument type, measurement range, communication address, sampling capability, current operating status and parameter writing permissions.

[0076] The parameter area to be calibrated refers to the parameter storage area in the target industrial instrument that can be updated by the remote calibration process. The parameter area to be calibrated may include areas such as zero-point parameter area, range parameter area, compensation coefficient parameter area, linear correction parameter area, and calibration curve parameter area.

[0077] The calibration target type refers to the calibration purpose that this remote calibration request aims to achieve. Calibration target types may include zero point correction, range correction, local linearity correction, temperature drift compensation correction, and calibration curve update.

[0078] The aforementioned acquisition of a remote calibration request for a target industrial instrument refers to receiving calibration task data from the remote operation and maintenance platform, the metrology and calibration platform, the edge gateway management interface, and the industrial instrument management system, and reading the fields in the calibration task data that specify the target industrial instrument, the parameter area to be calibrated, and the calibration target type.

[0079] The above-mentioned determination of the target industrial instrument, the parameter area to be calibrated, and the calibration target type refers to performing consistency parsing on the equipment identifier, instrument file, parameter area identifier, work order, calibration reason, and target parameter fields in the remote calibration request, and writing the parsing results into the session context of this remote calibration session.

[0080] Preferably, a remote calibration request may include a request number, initiating entity identifier, target industrial instrument identifier, parameter area identifier to be calibrated identifier, calibration target type identifier, request initiation time, work order number, field area identifier, calibration reason explanation, and expected completion time.

[0081] S11. Receive the remote calibration request and read the target industrial instrument identifier, the parameter area identifier to be calibrated, and the calibration target type identifier from the remote calibration request.

[0082] S12. Query the instrument file according to the target industrial instrument identification to obtain the instrument type, measuring range, accuracy class, alarm trigger amplitude, identification amplitude of perturbation response characteristics, communication channel and current operating status of the target industrial instrument.

[0083] S13. Query the parameter area mapping table of the target industrial instrument according to the identifier of the parameter area to be calibrated, and obtain the storage location of the parameter area to be calibrated in the target industrial instrument, the current parameter summary, the write permission status and the parameter version number.

[0084] S14. Read the calibration target rules according to the calibration target type identifier, and determine whether this remote calibration belongs to one of the calibration target types: zero point correction, range correction, local nonlinear offset correction, compensation coefficient correction, and calibration curve correction.

[0085] Preferably, in S11, the remote calibration request can be entered into the remote calibration process in one of the following formats: industrial IoT platform message, HTTPS interface message, OPCUA service call message, MQTT topic message, and edge gateway local task message.

[0086] Preferably, in S12, the current operating status of the target industrial instrument may include online status, maintenance status, calibration allowed status, remote write locked status, field bypass status, and alarm suppression status. When the target industrial instrument is in the remote write locked status, the above-mentioned remote calibration request will only enter the recording and prompting process.

[0087] Preferably, in S13, the current parameter summary can be obtained by summarizing the current parameter value, parameter version number, parameter writing time, parameter writing subject identifier, and instrument internal check code in the parameter area to be calibrated. The summary calculation can use SM3, SHA256, or hash algorithms supported by existing security chips in the industrial field.

[0088] Preferably, in S14, the calibration target rules may include the allowable calibration range corresponding to different calibration target types, the number of explicit standard source challenge sequence points to be triggered, whether to enable implicit perturbation watermark sequences, the candidate calibration parameter generation method, and the formal measurement benchmark area solidification conditions.

[0089] The above-mentioned S1 step resolves the remote calibration request into the target industrial instrument, the parameter area to be calibrated, and the calibration target type. This ensures that the subsequent explicit standard source challenge sequence, implicit perturbation watermark sequence, and candidate parameter source binding information all revolve around the same remote calibration session, thereby reducing the security risks caused by incorrect parameter area selection, incorrect instrument selection, and misuse of calibration targets from the source.

[0090] In engineering terms, step S2 can be understood as follows: after confirming the target industrial instrument, the parameter area to be calibrated, and the type of the calibration target, the remote operation and maintenance platform does not immediately calculate the candidate calibration parameters. Instead, it first generates a remote calibration intent constraint package that limits the boundaries of this remote calibration behavior. This restricts subsequent standard input execution, on-site physical response acquisition, candidate calibration parameter generation, and formal measurement reference area fixation.

[0091] The remote calibration intent constraint package refers to the data set used to describe the allowed scope, effective time, explicit challenge points, and implicit perturbation watermarking arrangements for this remote calibration. The aforementioned remote calibration intent constraint package serves as the basic object for subsequent data verification and candidate parameter source binding in this remote calibration session.

[0092] Among them, the adjustment range constraint refers to the range of changes that the candidate adjustment parameter can undergo relative to the current parameter state represented by the current parameter summary of the parameter region to be adjusted. The adjustment range constraint is used to prevent the candidate adjustment parameter from deviating from the allowed boundary of the business work order.

[0093] The effective calibration window refers to the time interval during which the remote calibration intent constraint package is allowed to be executed. The effective calibration window can consist of a start time, an end time, a maximum execution duration, a standard input point waiting time, and a response acquisition window.

[0094] Among them, the explicit standard source challenge sequence refers to the combination of standard input points generated by the remote end based on the measurement range and calibration target type of the target industrial instrument. The explicit standard source challenge sequence is used to drive the standard source device to output standard inputs that can be identified and executed by the field side.

[0095] Among them, the implicit perturbation watermark sequence refers to the low-amplitude, short-duration perturbation input arrangement superimposed on some standard input points. This perturbation input arrangement is identifiable but does not participate in the generation of candidate calibration parameters. The aforementioned implicit perturbation watermark sequence is used to leave a live trace of the measurement chain in the field physical response sequence.

[0096] The aforementioned remote calibration intent constraint package refers to calculating or selecting the calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence that are allowed to be executed in this remote calibration, based on the target industrial instrument's range, alarm trigger amplitude, perturbation response characteristic identification amplitude, current parameter summary of the parameter area to be calibrated, and calibration target type.

[0097] Preferably, the explicit standard source challenge sequence includes at least three non-contiguous standard input points, the order in which the standard input points are applied, the stable wait condition corresponding to each standard input point, and the sampling window offset.

[0098] Preferably, the implicit perturbation watermark sequence includes perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window.

[0099] S21. Based on the instrument type, range, and calibration target type of the target industrial instrument, determine the number and location of standard input points in the explicit standard source challenge sequence.

[0100] S22. Determine the perturbation amplitude in the latent perturbation watermark sequence based on the alarm trigger amplitude and the identification amplitude of the perturbation response characteristics of the target industrial instrument.

[0101] S23. Based on the response time constant, sampling period, and stability determination rules of the target industrial instrument, determine the stability waiting conditions and sampling window offset corresponding to each standard input point.

[0102] S24. Based on the current parameter summary of the parameter area to be calibrated, the business work order permissions, and the calibration target type, determine the calibration range constraints and the effective calibration window.

[0103] S25. Write the calibration amplitude constraint, calibration effective window, explicit standard source challenge sequence and implicit perturbation watermark sequence into the remote calibration intent constraint package, and generate a session identifier and integrity summary for the above remote calibration intent constraint package.

[0104] Preferably, in S21, when the target industrial instrument is a pressure transmitter and the calibration target type is range correction, the explicit standard source challenge sequence can be selected from the standard input point near the zero point, the intermediate range standard input point, and the high range standard input point within the range, and the above three standard input points are not arranged consecutively.

[0105] Preferably, in S21, the order in which the standard input points are applied in the explicit standard source challenge sequence can be a non-monotonic order, such as the order of intermediate range standard input points, high range standard input points, and standard input points near zero, to reduce the risk of substitution using historical order responses.

[0106] Preferably, in S22, the perturbation amplitude is less than the alarm trigger amplitude of the target industrial instrument and greater than the identification amplitude of the perturbation response characteristics, so that the perturbation input can form an identifiable measurement chain live trace in the field physical response sequence, while not triggering the alarm logic of the target industrial instrument.

[0107] Preferably, in S23, the stabilization waiting condition can be set to the response change of multiple consecutive sampling points being lower than the stabilization change threshold. The stabilization change threshold can be determined based on the accuracy level of the target industrial instrument, the sampling noise level, and the fluctuation level of the on-site operating conditions.

[0108] Preferably, in S24, the calibration effective window can be set to start timing from the moment the remote calibration intent constraint package is generated, and remain effective until the field standard source device completes execution, the response acquisition is completed, and the candidate parameter source binding information is generated.

[0109] The above S2 step generates a remote calibration intent constraint package, which enables the remote calibration to have a verifiable intent boundary, allows the explicit standard source challenge sequence to be used for candidate calibration parameter generation, and allows the implicit perturbation watermark sequence to be used for measurement chain liveness verification, thereby mitigating the conflict between security verification and calibration accuracy from a mechanism perspective.

[0110] For step S3, in engineering terms, it can be understood as the process by which the remote operation and maintenance platform or the edge standard source control unit drives the field standard source device to output the corresponding standard input according to the explicit standard source challenge sequence, and superimposes the perturbation input according to the implicit perturbation watermark sequence at some standard input points corresponding to the explicit standard source challenge sequence, so that the field target industrial instrument receives an input that contains both explicit calibration reference and implicit live witness traces.

[0111] The standard input control information refers to the set of control commands used to control the output standard input points of the field standard source devices. The standard input control information may include the target value of the standard input point, the application sequence, the lifting direction, the stabilization waiting conditions, the sampling window offset, the standard source device identifier, and the execution timestamp.

[0112] Among them, perturbation input refers to small-amplitude input changes superimposed within some standard input points. The role of perturbation input is not to participate in the calculation of candidate calibration parameters, but to form a measurement chain live trace in the field physical response sequence that can correspond to the implicit perturbation watermark sequence.

[0113] The standard input execution result refers to the recorded result of the field standard source device after execution based on the standard input control information and perturbation input. The standard input execution result may include the standard input point execution value, execution start time, stabilization time, perturbation superposition time, standard source device status, and execution confirmation summary.

[0114] The aforementioned standard input control information refers to converting the standard input points, application order, stability wait conditions, and sampling window offsets in the explicit standard source challenge sequence into control commands that the standard source device can recognize.

[0115] The perturbation input corresponding to the superimposed and implicit perturbation watermark sequence refers to the short-term input change generated by the standard source device after some standard input points have entered the acquisition state, according to the perturbation amplitude, perturbation direction, perturbation duration and perturbation insertion position.

[0116] S31. Read the explicit standard source challenge sequence in the remote calibration intent constraint package and convert each standard input point into the target output value, output control mode and stable wait condition of the standard source device.

[0117] S32. Read the implicit perturbation watermark sequence in the remote calibration intent constraint package, and determine the standard input point that needs to be superimposed with the perturbation input and the corresponding perturbation insertion position.

[0118] S33. Send standard input control information to the field standard source device so that the field standard source device outputs standard input points in the order of application of the explicit standard source challenge sequence.

[0119] S34. Within at least a portion of the standard input points corresponding to the explicit standard source challenge sequence, superimpose the perturbation input according to the implicit perturbation watermark sequence.

[0120] S35. Record the execution process of the standard source device and obtain the standard input execution result.

[0121] Preferably, in S31, the standard source device can be a pressure calibrator, temperature calibration furnace, flow standard device, liquid level simulation device, and analyzer standard liquid dosing device, etc., which can provide standard input to the target industrial instrument.

[0122] Preferably, in S33, integrity and timeliness checks can be performed before the standard input control information is sent, so that the field standard source device only executes the standard input control information within the calibration validity window.

[0123] Preferably, in S34, the data segment corresponding to the perturbation input does not participate in the generation of candidate tuning parameters, and the perturbation duration of the perturbation input can be less than the sampling window length of the main response area, so that the perturbation witness area can be isolated from the main response area in terms of data segments.

[0124] Preferably, in S35, the standard input execution result can be generated by the local controller of the standard source device, and includes the standard source device identifier, the standard source device internal clock, the execution status word and the execution confirmation summary, for subsequent timing correspondence with the sampling time response summary.

[0125] The above-mentioned S3 step transforms the explicit standard source challenge sequence into standard input control information and the implicit perturbation watermark sequence into perturbation input, so that the field physical response sequence of the target industrial instrument simultaneously contains the response information required for calibration calculation and the perturbation traces required for measurement chain liveness verification, thereby providing a data basis for the subsequent separation of the main response area and the perturbation witness area.

[0126] For step S4, in engineering terms, it can be understood as the field response acquisition link continuously acquiring the response data of the target industrial instrument during the period when the standard source device outputs standard input control information and perturbation input. It then forms a field physical response sequence according to the sampling time, response value, standard source execution status, and acquisition channel status. Finally, it performs summary processing on the above field physical response sequence to obtain the sampling time response summary used for subsequent source binding and perturbation feature verification.

[0127] The field physical response sequence refers to the set of continuous response data of the target industrial instrument to standard input control information and perturbation input during this remote calibration process. The field physical response sequence may include sampling time, instrument output value, original sampled value, acquisition channel identifier, standard source execution status, field temperature, field power supply status and communication quality status.

[0128] Among them, the sampling time response summary refers to the summary information obtained after summarizing the sampling time sequence, response value changes, acquisition window position and data segment boundary in the field physical response sequence. The above sampling time response summary is used to prove that the subsequent main response area, perturbation witness area and measurement chain live witness summary all come from the same field physical response sequence.

[0129] The aforementioned acquisition of the field physical response sequence refers to reading the response data of the target industrial instrument during the execution of standard input through the edge gateway, instrument communication interface, data acquisition unit, and field control system, and retaining the sampling time and acquisition source of the response data.

[0130] The aforementioned generation of sampling time response summaries refers to the process of denoising, time alignment, fragment labeling, and summarizing the on-site physical response sequence to obtain a structured summary that reflects the sampling time sequence and response fragment boundaries.

[0131] S41. Before the standard input control information is executed, start the response acquisition process and synchronously record the initial output status and acquisition channel status of the target industrial instrument.

[0132] S42. During the execution of standard input control information, the output response of the target industrial instrument is collected according to the preset sampling period to obtain a field physical response sequence containing multiple sampling points.

[0133] S43. Time-align the field physical response sequence based on the execution timestamp of the standard source device, the sampling timestamp of the target industrial instrument, and the receiving timestamp of the edge gateway.

[0134] S44. Mark abnormal sampling points, duplicate sampling points, and sampling gaps on the time-aligned on-site physical response sequence, and retain the above marking results.

[0135] S45. Generate a sampling time response summary based on the sampling time, response value, acquisition channel identifier, and segment boundary information in the on-site physical response sequence.

[0136] Preferably, in S42, the preset sampling period can be determined according to the response time constant and perturbation duration of the target industrial instrument, so that the field physical response sequence covers the standard input point stabilization process and the perturbation input response process.

[0137] Preferably, in S43, time alignment can be performed using a remote calibration session time axis other than the unified incident time axis. The remote calibration session time axis can be formed by offset correction of the remote operation and maintenance platform time, the edge gateway time, and the standard source device time.

[0138] Preferably, in S44, the abnormal sampling point marker can be obtained based on short-term interruption of the acquisition channel, timeout of instrument communication, response value jump exceeding the allowable fluctuation range of the field working conditions, and abnormal execution status of the standard source equipment.

[0139] Preferably, in S45, the sampling time response summary can be generated in the form of a fragment summary, that is, fragment summaries are generated according to the standard input point, the stable waiting phase, the main response candidate phase, and the perturbation response candidate phase, and each fragment summary is associated with the remote calibration session identifier.

[0140] The above S4 step acquires the on-site physical response sequence during the execution of standard input control information and perturbation input, and generates a response summary at the sampling time. This enables the remote end to obtain not only the response value, but also the sampling time sequence, segment boundary, and acquisition link status corresponding to the response value. This provides a basis for subsequent judgment on whether the main response area corresponds to the explicit standard source challenge sequence and whether the perturbation witness area matches the implicit perturbation watermark sequence.

[0141] Step S5 can be understood as follows: after obtaining the on-site physical response sequence and the response summary at the sampling time, the on-site physical response sequence is divided into a main response area for calibration calculation and a perturbation witness area for liveness verification according to the temporal correspondence between the explicit standard source challenge sequence and the implicit perturbation watermark sequence, so that the main response area and the perturbation witness area are isolated from each other in terms of data fragments.

[0142] The main response region refers to the stable segment of the response in the field physical response sequence that corresponds to the challenge sequence of the explicit standard source. The main response region is used to reflect the measurement deviation of the target industrial instrument after it stabilizes at the standard input point.

[0143] Among them, the perturbation witness area refers to the response perturbation segment in the on-site physical response sequence that corresponds to the implicit perturbation watermark sequence. The perturbation witness area is used to extract response direction features, response arrival time features, response recovery trend features, and perturbation window summary.

[0144] In this context, the separation of data segments refers to the separate processing of the main response area and the perturbation witness area in terms of time window, sampling point set, segment summary, and subsequent use, so that the data segments corresponding to the perturbation input do not participate in the generation of candidate tuning parameters.

[0145] The above-mentioned division of the main response region refers to selecting the stable segment of the response that meets the stable waiting condition as the main response region from the field physical response sequence corresponding to the same standard input point.

[0146] The aforementioned division of the perturbation witness region refers to selecting the data segment corresponding to the perturbation insertion position and the perturbation response feature extraction window from the response perturbation segment formed after superimposing the perturbation input as the perturbation witness region.

[0147] S51. Read the response summary at the sampling time and determine the candidate main response fragment corresponding to each standard input point based on the application order, stable waiting condition and sampling window offset of each standard input point in the explicit standard source challenge sequence.

[0148] S52. Perform stability screening on candidate main response segments and determine the stable response segments that meet the stable waiting conditions as the main response area.

[0149] S53. Read the implicit perturbation watermark sequence, and determine the candidate perturbation response fragment corresponding to each perturbation input based on the perturbation insertion position, perturbation duration, and perturbation response feature extraction window.

[0150] S54. Select data segments with changes in response direction, arrival time, and recovery trend from the candidate perturbation response segments, and determine the above data segments as perturbation witness areas.

[0151] S55. Establish fragment boundary markers for the main response area and the micro-perturbation witness area, and write the above fragment boundary markers into the response partition record of this remote calibration session.

[0152] Preferably, in S51, the sampling window offset can be used to compensate for the time difference between the standard source device output reaching the target standard input point and the target industrial instrument response reaching a steady state.

[0153] Preferably, in S52, the stable waiting condition can be determined by the method that the change in the response of continuous sampling points is lower than the stable change threshold. The stable change threshold can be pre-configured according to the accuracy level of the target industrial instrument, the sampling noise level, and the fluctuation level of the on-site operating conditions.

[0154] Preferably, in S53, the starting point of the perturbation response feature extraction window can be determined by the estimated range of the perturbation insertion position and the response arrival time, and the length of the perturbation response feature extraction window can cover the perturbation input application stage and the response recovery stage.

[0155] Preferably, in S55, the fragment boundary marker may include the fragment start sampling time, the fragment end sampling time, the fragment type, the corresponding standard input point identifier, the corresponding perturbation watermark identifier, and the fragment summary.

[0156] The above-mentioned S5 step divides the field physical response sequence into a main response region and a perturbation witness region, so that the generation of candidate calibration parameters is based on stable response segments and the generation of measurement chain live witness summaries is based on perturbation response segments, thereby taking into account both calibration calculation accuracy and physical source proof in the same remote calibration process.

[0157] Step S6 can be understood as calculating candidate calibration parameters by utilizing the response deviation between the main response region and the explicit standard source challenge sequence, while generating a measurement chain live witness summary by utilizing the perturbation response characteristics in the perturbation witness region, so that the calibration results and live witness evidence come from different data fragments and are bound together in subsequent steps.

[0158] The response deviation refers to the difference between the target industrial instrument response value in the main response region and the corresponding standard input point in the explicit standard source challenge sequence. The above response deviation can reflect zero-point offset, range offset and local nonlinear offset.

[0159] Among them, the candidate calibration parameters refer to the calibration results that have not yet been written into the formal measurement reference area. The above candidate calibration parameters are in a pending state before the candidate parameter source binding information is verified.

[0160] Among them, the candidate parameter generation trajectory refers to the intermediate process record of extracting response deviation from the main response region, determining zero-point offset information, range offset information and local nonlinear offset information, and then generating candidate calibration parameters.

[0161] Among them, the perturbation response characteristics refer to the features in the perturbation witness area that can reflect the correspondence between the perturbation input and the actual physical response of the target industrial instrument. The perturbation response characteristics include response direction characteristics, response arrival time characteristics, response recovery trend characteristics, and perturbation window summary.

[0162] Among them, the measurement chain live witness summary refers to the summary information generated based on the perturbation response characteristics. The above measurement chain live witness summary is used to prove that there is a real physical correlation between the standard input, the instrument response and the response acquisition.

[0163] The aforementioned generation of candidate calibration parameters refers to determining zero-point offset information, range offset information, and local nonlinear offset information based on the response deviations corresponding to different standard input points, and obtaining candidate calibration parameters within the range limited by the calibration amplitude constraint.

[0164] The aforementioned extraction of perturbation response features refers to reading the response direction, response arrival time, response recovery trend, and data summary within the perturbation window caused by the perturbation input from the perturbation witness area.

[0165] S61. Read the stable response value corresponding to each standard input point from the main response area and match it with the corresponding standard input point in the explicit standard source challenge sequence.

[0166] S62. Determine the zero-point offset information based on the response deviation corresponding to the low-range standard input point, determine the range offset information based on the response deviation corresponding to the high-range standard input point, and determine the local nonlinear offset information based on the response deviation corresponding to the intermediate-range standard input point.

[0167] S63. Based on the zero-point offset information, range offset information, and local nonlinear offset information, generate candidate calibration parameters within the range limited by the calibration amplitude constraint.

[0168] S64. Record the process of reading the stable response value from the main response area, calculating the response deviation, determining the offset information, and generating candidate calibration parameters to obtain the candidate parameter generation trajectory.

[0169] S65. Extract response direction features, response arrival time features, response recovery trend features, and perturbation window summary from the perturbation witness area.

[0170] S66. Generate a measurement chain live witness summary based on response direction characteristics, response arrival time characteristics, response recovery trend characteristics, and perturbation window summary.

[0171] Preferably, in S61, the stable response value can be obtained by using one of the following methods: the median value of multiple sampling points in the main response region, the truncated average value, and the average value at the end of the stable segment.

[0172] Preferably, in S62, the zero-point offset information can be obtained from the response deviation corresponding to the standard input point near the zero point, the range offset information can be obtained from the response deviation corresponding to the high-range standard input point, and the local nonlinear offset information can be obtained from the difference between the response deviation corresponding to the intermediate-range standard input point and the zero-point offset information and the range offset information.

[0173] Preferably, in S63, when the generated candidate calibration parameters exceed the calibration range constraint, the candidate calibration parameters can be marked as exceeding the limit and awaiting review, and the above candidate calibration parameters can be prevented from entering the solidification process of the formal measurement reference area.

[0174] Preferably, in S65, the response direction feature refers to the upward, downward, or recovery direction of the target industrial instrument response value relative to the perturbation direction; the response arrival time feature refers to the time interval between the application of the perturbation input and the achievement of a identifiable change in the response value; the response recovery trend feature refers to the trend of the response value returning to its original stable level after the perturbation input ends; and the perturbation window summary refers to the summary information of the sampled values, sampling times, and segment boundaries within the perturbation response feature extraction window.

[0175] The above S6 step generates candidate calibration parameters from the main response area and a measurement chain liveness witness summary from the perturbation witness area, which separates the candidate calibration parameters from the measurement chain liveness proof in terms of data source, and allows them to belong to the same remote calibration session when the source is bound. This reduces the interference of perturbation input on calibration calculation and improves the physical source credibility of the candidate calibration parameters.

[0176] In engineering terms, step S7 can be understood as combining explicit challenge information, implicit watermark information, response summary information, live witness information, parameter result information, parameter generation process information, and parameter inheritance information related to this remote calibration session into candidate parameter source binding information after the candidate calibration parameters and measurement chain live witness summary are generated.

[0177] Among them, the candidate parameter source binding information refers to the data set used to prove the source, generation process and solidification qualification of the candidate calibration parameters. The aforementioned candidate parameter source binding information is not a single log record, but simultaneously includes the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the sampling time response summary, the measurement chain live witness summary, the candidate calibration parameters, the candidate parameter generation trajectory and the current parameter summary of the parameter area to be calibrated.

[0178] The current parameter summary of the parameter area to be calibrated refers to the summary of the existing parameter status of the parameter area to be calibrated in the target industrial instrument before the candidate calibration parameters are generated. The current parameter summary is used to indicate the inheritance relationship of the candidate calibration parameters relative to the existing formal measurement benchmark.

[0179] The aforementioned candidate parameter source binding information refers to the association, sorting, summarization, and encapsulation of key objects in this remote calibration session, enabling the remote end to verify whether the candidate calibration parameters come from the main response area corresponding to the explicit standard source challenge sequence before solidification, and to verify whether the measurement chain live witness summary matches the implicit perturbation watermark sequence.

[0180] S71. Read the identifier of this remote calibration session, the summary of the remote calibration intent constraint package, the explicit standard source challenge sequence, and the implicit perturbation watermark sequence.

[0181] S72. Read the response summary at the sampling time, the boundary marker of the main response region segment, the boundary marker of the perturbation witness region segment, and the measurement chain live witness summary.

[0182] S73. Read the candidate calibration parameters, the candidate parameter generation trajectory, and the current parameter summary of the parameter area to be calibrated.

[0183] S74. Establish the correspondence between the explicit standard source challenge sequence and the main response region, and establish the correspondence between the implicit perturbation watermark sequence and the measurement chain live witness summary.

[0184] S75. Establish the correspondence between the candidate parameter generation trajectory and the response deviation of the main response region, and establish the inheritance relationship between the candidate calibration parameters and the current parameter summary of the parameter region to be calibrated.

[0185] S76. Encapsulate the above correspondence and inheritance relationships into candidate parameter source binding information, and generate a summary of candidate parameter source binding information.

[0186] Preferably, in S74, the correspondence between the explicit standard source challenge sequence and the main response region may include the standard input point identifier, the application order, the stable waiting condition, the start sampling time of the main response region, the end sampling time of the main response region, and the main response region fragment summary.

[0187] Preferably, in S74, the correspondence between the latent perturbation watermark sequence and the measurement chain live witness summary may include the perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, perturbation response feature extraction window, and measurement chain live witness summary.

[0188] Preferably, in S75, the correspondence between the candidate parameter generation trajectory and the response deviation of the main response region may include the source segment of each response deviation, the deviation calculation time, the offset information type, and the corresponding candidate calibration parameter field.

[0189] Preferably, in S75, the inheritance relationship between the candidate calibration parameters and the current parameter summary of the parameter area to be calibrated may include the current parameter summary, the candidate calibration parameter version number, the calibration amplitude constraint matching result, and the parameter change field list.

[0190] The above-mentioned S7 step generates candidate parameter source binding information, so that the candidate calibration parameter is no longer just a writable parameter value, but carries the source evidence formed by the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the on-site physical response sequence and the current state of the parameter area to be calibrated, thereby reducing the risk of the on-site edge link bypassing the remote calibration security protection by forging records through consistency.

[0191] For step S8, in engineering terms, it can be understood as performing gated verification on the source binding information of the candidate parameters before writing the candidate calibration parameters into the formal measurement reference area, determining whether the candidate calibration parameters come from the main response area corresponding to the explicit standard source challenge sequence, and determining whether the measurement chain live witness summary matches the implicit perturbation watermark sequence.

[0192] Among them, verifying the source binding information of candidate parameters refers to making a consistency judgment on multiple correspondences and inheritance relationships in the source binding information of candidate parameters. The above consistency judgment includes the correspondence between the explicit standard source challenge sequence and the main response area, the correspondence between the implicit perturbation watermark sequence and the measurement chain live witness summary, the correspondence between the candidate parameter generation trajectory and the response deviation of the main response area, and the inheritance relationship between the candidate calibration parameters and the current parameter summary of the parameter area to be calibrated.

[0193] Among them, the preset fixed conditions refer to the gating conditions that allow candidate calibration parameters to enter the formal measurement reference area. The preset fixed conditions may include session identifier matching, calibration effective window matching, standard input point sequence matching, perturbation response feature matching, candidate parameter generation trajectory matching, calibration amplitude constraint matching, and current parameter summary inheritance matching.

[0194] The above-mentioned determination of whether the candidate calibration parameters originate from the main response region corresponding to the explicit standard source challenge sequence refers to checking whether the response deviation in the candidate parameter generation trajectory can be traced back to the segment boundary marker of the main response region, and checking whether the main response region corresponds to the standard input point in the explicit standard source challenge sequence.

[0195] The above-mentioned determination of whether the live witness summary of the measurement chain matches the current implicit perturbation watermark sequence refers to extracting the target perturbation response features from the data segment corresponding to the response summary at the sampling time according to the perturbation response feature extraction window, and comparing the matching relationship between the target perturbation response features and the implicit perturbation watermark sequence.

[0196] S81. Verify the correspondence between the explicit standard source challenge sequence and the main response region, and determine whether the standard input point identifier, application order, stable waiting conditions and the main response region fragment summary match.

[0197] S82. Verify the correspondence between the latent perturbation watermark sequence and the measurement chain live witness summary, and determine whether the perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window match the measurement chain live witness summary.

[0198] S83. Verify the correspondence between the candidate parameter generation trajectory and the response deviation of the main response zone, and determine whether the zero-point offset information, range offset information and local nonlinear offset information come from the response deviation of the main response zone.

[0199] S84. Verify the inheritance relationship between the candidate calibration parameters and the current parameter summary of the parameter area to be calibrated, and determine whether the candidate calibration parameters are based on the parameter status corresponding to the current parameter summary.

[0200] S85. When the above correspondence and inheritance relationships meet the preset solidification conditions, the candidate parameter source binding information verification is confirmed to be successful.

[0201] S86. If any correspondence or inheritance relationship does not meet the preset solidification conditions, it is determined that the candidate parameter source binding information verification has failed.

[0202] Preferably, in S82, the target perturbation response features can be extracted from the data fragment corresponding to the response summary at the sampling time, so that the perturbation verification does not depend on the separately reported perturbation result text.

[0203] Preferably, in S82, when the response direction feature is opposite to the perturbation direction, the response arrival time feature exceeds the extraction window, the response recovery trend feature is missing, or the perturbation window summary does not match the response summary at the sampling time, it can be determined that the measurement chain live witness summary does not meet the preset solidification conditions.

[0204] Preferably, in S83, when the candidate parameter generation trajectory references the data segment corresponding to the perturbation witness area, it can be determined that the correspondence between the candidate parameter generation trajectory and the response deviation of the main response area does not meet the preset solidification condition.

[0205] Preferably, in S84, when the current parameter summary of the parameter area to be adjusted is inconsistent with the current parameter summary recorded in the candidate parameter source binding information, it can be determined that the inheritance relationship between the candidate parameter and the current parameter summary of the parameter area to be adjusted does not meet the preset solidification condition.

[0206] The above-mentioned S8 step expands the judgment criteria for candidate calibration parameters before solidification from account permissions, signature integrity and parameter range to a combination of physical response source, perturbation liveness witness, generation trajectory and parameter inheritance relationship by gated verification of the candidate parameter source binding information. This improves the ability of the remote calibration process to identify forged responses, replay of historical responses and tampering of candidate parameters.

[0207] For step S9, when the candidate parameter source binding information verification passes, the candidate calibration parameter is written into the formal measurement reference area of ​​the target industrial instrument. When the verification fails, the writing process is blocked, and the candidate calibration parameter is cleared to avoid contaminating the formal measurement reference area with parameters that have not been verified from their source.

[0208] The formal measurement reference area refers to the parameter storage area in the target industrial instrument used to support the subsequent measurement data output. The formal measurement reference area may include zero-point reference, range reference, compensation coefficient, linear correction parameter and calibration curve parameter.

[0209] Among them, "solidification" refers to converting the candidate calibration parameters from the unsolidified state to the valid parameter state in the formal measurement reference area, and updating the corresponding parameter version number, writing time, and reference source record.

[0210] Among them, prohibiting candidate calibration parameters from being written to the formal measurement reference area means blocking the parameter writing interface of the target industrial instrument or the writing channel of the edge gateway when the verification of the candidate parameter source binding information fails.

[0211] Among them, clearing candidate tuning parameters refers to deleting or invalidating candidate tuning parameters, candidate parameter temporary files, pending write cache, and current write token that are in a pending state.

[0212] S91. Read the verification result of the candidate parameter source binding information.

[0213] S92. When the candidate parameter source binding information is verified, a formal measurement reference area write instruction is generated, and the candidate calibration parameters are written into the formal measurement reference area.

[0214] S93. After the candidate calibration parameters are written into the formal measurement reference area, update the parameter version number, writing time, writing subject identifier, and reference source record of the formal measurement reference area.

[0215] S94. When the verification of the source binding information of the candidate parameter fails, the write command corresponding to the candidate calibration parameter is blocked, and the candidate calibration parameter is prohibited from being written to the formal measurement reference area.

[0216] S95. Clear the candidate calibration parameters and write the reason why the candidate parameter source binding information verification failed to pass into the remote calibration security event log.

[0217] Preferably, in S92, the formal measurement reference area write command can carry a candidate parameter source binding information summary and a write aging identifier, so that the target industrial instrument only accepts the write command corresponding to the current verification result.

[0218] Preferably, in S93, the reference source record may include a remote calibration session identifier, a remote calibration intent constraint package summary, a candidate parameter source binding information summary, a candidate parameter generation trajectory summary, and a measurement chain live witness summary.

[0219] Preferably, in S94, the write blocking command can be achieved by disabling the write token, revoking the edge gateway's write permission, locking the write entry point of the parameter area to be adjusted, and returning the blocking status to the remote operation and maintenance platform.

[0220] Preferably, in S95, the remote calibration security event log may include the correspondence type that failed the verification, the main response area segment involved, the micro-perturbation witness area segment involved, the candidate calibration parameter field, and the processing result.

[0221] The above S9 step solidifies the candidate calibration parameters when the candidate parameter source binding information verification passes, and prohibits writing and clearing the candidate calibration parameters when the verification fails. This ensures that the formal measurement reference area will not receive parameter results that are detached from the actual physical response and the live witness of the measurement chain, thereby shifting security protection from post-audit to the gating control stage before parameter writing.

[0222] In engineering terms, step S10 can be understood as follows: after the candidate calibration parameters are solidified into the formal measurement reference area, not only is the remote calibration log of this time recorded, but also a measurement chain living reference lineage identifier is generated that can be output along with the subsequent measurement data of the target industrial instrument, so that the subsequent measurement data continues to carry its measurement reference source information.

[0223] Among them, the measurement chain liveness reference lineage identifier refers to the reference source identifier generated after the candidate calibration parameters are solidified, based on the candidate parameter source binding information, the parameter version number of the formal measurement reference area, the measurement chain liveness witness summary, and the remote calibration session identifier.

[0224] The subsequent measurement data refers to the pressure, flow rate, temperature, liquid level, concentration, conductivity, and other industrial process measurement data output by the target industrial instrument after the candidate calibration parameters have been solidified.

[0225] The aforementioned measurement chain liveness reference lineage identifier refers to the combination of candidate parameter source binding information summary, formal measurement reference area parameter version number, target industrial instrument identifier, remote calibration session identifier, and measurement chain liveness witness summary to form an identifier that can be transmitted with measurement data.

[0226] The aforementioned "carrying measurement chain live reference lineage identifier" in the subsequent measurement data output by the target industrial instrument refers to attaching the aforementioned measurement chain live reference lineage identifier to the data frame, data packet, data record, or platform storage record of the subsequent measurement data during the data output process of the target industrial instrument, edge gateway, or remote operation and maintenance platform.

[0227] S101. After the candidate calibration parameters are fixed to the formal measurement reference area, read the parameter version number, candidate parameter source binding information summary, and measurement chain live witness summary of the formal measurement reference area.

[0228] S102. Generate a measurement chain live reference lineage identifier based on the target industrial instrument identifier, remote calibration session identifier, parameter version number of the formal measurement reference area, candidate parameter source binding information summary, and measurement chain live witness summary.

[0229] S103. Write the measurement chain liveness reference lineage identifier into the data output configuration of the target industrial instrument, the data forwarding configuration of the edge gateway, or the data recording configuration of the remote operation and maintenance platform.

[0230] S104. When the target industrial instrument outputs subsequent measurement data, make the subsequent measurement data carry the measurement chain live reference lineage identifier.

[0231] S105. When the measurement chain live reference lineage identifier carried by the subsequent measurement data does not match the binding information of the most recent candidate parameter source, the subsequent measurement data is marked as untrusted measurement data, and the untrusted measurement data is restricted from entering the subsequent remote calibration closed loop.

[0232] Preferably, in S102, the measurement chain live reference lineage identifier can be a fixed-length summary identifier, a segmented reference identifier, or a combination identifier consisting of an instrument identifier segment, a session identifier segment, a parameter version segment, and a source summary segment.

[0233] Preferably, in S103, when the target industrial instrument has an extended data field, the measurement chain live reference lineage identifier can be directly output by the target industrial instrument along with the measurement data.

[0234] Preferably, in S103, when the target industrial instrument does not have an extended data field, the measurement chain liveness reference lineage identifier can be added to the data record by the edge gateway when forwarding subsequent measurement data.

[0235] Preferably, in S105, the unreliable measurement data can retain the original measurement value and timestamp, but an unreliable status flag is added to the remote operation and maintenance platform so that the above unreliable measurement data is not used as the basis for parameter calculation in the next round of automatic remote calibration.

[0236] The above-mentioned S10 step generates a measurement chain live reference lineage identifier and makes subsequent measurement data carry the above-mentioned measurement chain live reference lineage identifier, so that the data security protection of remote calibration extends from the solidification of single candidate calibration parameters to the subsequent measurement data output and remote calibration closed-loop use stage, thereby realizing the continuous association between the measurement data and its official measurement reference area source.

[0237] Example 3:

[0238] This embodiment illustrates the coordination relationship between the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the main response area, the perturbation witness area, the candidate parameter source binding information, and the measurement chain live reference lineage identifier.

[0239] In the scenario of remote calibration of industrial instruments, the standard source execution record, instrument response record, candidate calibration parameters and calibration log received by the remote end may all be transmitted through the same edge link. Therefore, the consistency of the above records alone cannot directly prove that the candidate calibration parameters come from the actual standard input, the actual target industrial instrument response and the actual response acquisition link.

[0240] In this embodiment, the explicit standard source challenge sequence is used to form the basis for calculating candidate calibration parameters, and the implicit perturbation watermark sequence is used to form the basis for measurement chain live witnessing, so that calibration calculation and security witnessing correspond to different data segments in the same remote calibration session.

[0241] The explicit standard source challenge sequence includes at least three discontinuous standard input points, the order in which the standard input points are applied, the stable waiting condition corresponding to each standard input point, and the sampling window offset. The implicit perturbation watermark sequence includes the perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window.

[0242] The perturbation amplitude is less than the alarm trigger amplitude of the target industrial instrument but greater than the identification amplitude of the perturbation response feature. The duration of the perturbation is greater than one sampling period of the target industrial instrument but less than one-third of the sampling window length of the main response area. The perturbation insertion position avoids the main response area used for generating candidate calibration parameters.

[0243] When the field standard source device outputs standard input points according to the explicit standard source challenge sequence, it superimposes perturbation inputs according to the implicit perturbation watermark sequence in at least some of the standard input points, so that the target industrial instrument forms a field physical response sequence containing stable response segments and perturbation response segments.

[0244] After the on-site physical response sequence is generated, the stable response segments that meet the stable waiting conditions are determined as the main response region based on the stable waiting conditions and sampling window offset in the explicit standard source challenge sequence. The response perturbation segments formed after superimposing perturbation input are determined as perturbation witness regions based on the perturbation insertion position, perturbation duration, and perturbation response feature extraction window in the implicit perturbation watermark sequence.

[0245] When the target industrial instrument response has not yet recovered to the stable state of the main response area after the perturbation input ends, the corresponding recovery segment is assigned to the perturbation witness area or isolation interval and is not entered into the main response area, so as to avoid the data segment corresponding to the perturbation input from participating in the generation of candidate calibration parameters.

[0246] Candidate calibration parameters are generated based on the response deviation between the main response region and the explicit standard source challenge sequence. The response deviation includes zero-point offset information corresponding to the low-range standard input point, range offset information corresponding to the high-range standard input point, and local nonlinear offset information corresponding to the intermediate-range standard input point.

[0247] When generating candidate calibration parameters, the candidate parameter generation trajectory only references the response stability value, response deviation, and offset information corresponding to the main response region, and does not reference the data segment corresponding to the perturbation witness region.

[0248] The measurement chain live witness summary is generated based on the response direction characteristics, response arrival time characteristics, response recovery trend characteristics, and perturbation window summary in the perturbation witness area. The perturbation response characteristics are only used for live witnessing and source verification and are not used as the basis for calculating zero-point offset information, range offset information, or local nonlinear offset information.

[0249] The candidate parameter source binding information binds the correspondence between the explicit standard source challenge sequence and the main response area, the main response area and the response deviation, the response deviation and the candidate parameter generation trajectory, the candidate parameter generation trajectory and the candidate calibration parameters, the implicit perturbation watermark sequence and the perturbation witness area, and the perturbation witness area and the measurement chain live witness summary to the same remote calibration session.

[0250] The candidate parameter source binding information also includes the current parameter summary of the parameter area to be calibrated, so that the candidate calibration parameters and the existing parameter states before the formal measurement reference area is solidified form an inheritance relationship.

[0251] When the correspondence between the explicit standard source challenge sequence and the main response area, the correspondence between the implicit perturbation watermark sequence and the measurement chain live witness summary, the correspondence between the candidate parameter generation trajectory and the response deviation of the main response area, and the inheritance relationship between the candidate calibration parameters and the current parameter summary of the parameter area to be calibrated all meet the preset solidification conditions, the candidate parameter source binding information verification passes.

[0252] When the measurement chain live witness summary is missing, the perturbation response characteristics do not match, the candidate parameter generation trajectory references the perturbation witness area data segment, the candidate calibration parameter does not inherit the current parameter summary of the parameter to be calibrated area, or the calibration effective window is invalid, the candidate parameter source binding information verification fails and the candidate calibration parameter does not enter the formal measurement reference area.

[0253] After the candidate calibration parameters are fixed to the formal measurement reference area, a measurement link live reference lineage identifier is generated based on the candidate parameter source binding information summary, measurement link live witness summary, formal measurement reference area parameter version number, target industrial instrument identifier, and remote calibration session identifier.

[0254] When the target industrial instrument has extended data fields, the measurement chain liveness reference lineage identifier is output by the target industrial instrument along with subsequent measurement data.

[0255] When the target industrial instrument does not have extended data fields, the measurement chain liveness reference lineage identifier is attached to the corresponding data record by the edge gateway when forwarding subsequent measurement data.

[0256] This embodiment separates the calculation basis of candidate calibration parameters from the measurement chain liveness proof basis by isolating the main response area and the perturbation witness area. Furthermore, it extends the physical source proof of this remote calibration to the formal measurement reference area for solidification and subsequent measurement data output process through candidate parameter source binding information and measurement chain liveness reference lineage identifiers.

[0257] Example 4:

[0258] The explicit standard source challenge sequence selects at least three discontinuous standard input points because zero offset information, range offset information, and local nonlinear offset information each require response deviations at different range positions to support them.

[0259] If only one standard input point is used, the remote end can only judge the single-point response deviation, and it is difficult to distinguish between zero-point offset, range offset and local nonlinear offset.

[0260] If a continuously increasing or continuously decreasing sequence of standard input points is used, the field side can more easily use historical continuous calibration records to replace the current field physical response sequence.

[0261] The aforementioned at least three discontinuous standard input points enable the candidate parameter generation trajectory to simultaneously cover low-range, intermediate-range, and high-range response deviations, and increase the temporal characteristics of this remote calibration session by applying the discontinuous sequence.

[0262] The stability wait condition in the explicit standard source challenge sequence is used to exclude transitional data when the standard source equipment is not yet stable, the target industrial instrument response is not yet stable, and the field acquisition link is not yet stable.

[0263] Preferably, the stable waiting conditions include the response change condition and the waiting time condition.

[0264] The above response change condition refers to the response change among multiple consecutive sampling points being lower than the stable change threshold.

[0265] The above waiting time condition refers to the waiting time corresponding to the response time constant of the target industrial instrument after the standard source device reaches the standard input point.

[0266] Preferably, for pressure transmitters, the waiting time condition can be set to one to five times the response time constant of the target industrial instrument.

[0267] Preferably, for temperature transmitters, the waiting time condition can be determined jointly based on the thermal stability time of the temperature standard source and the thermal inertia of the target industrial instrument probe.

[0268] The selection of perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window for the latent perturbation watermark sequence is because the measurement chain liveness proof needs to simultaneously reflect the relationship between input changes, instrument response changes, and acquisition time.

[0269] The perturbation amplitude is used to control the identifiability of live traces in the measurement chain.

[0270] The perturbation direction is used to provide directional constraints in the perturbation response characteristics.

[0271] The perturbation duration is used to provide time length constraints in the perturbation response characteristics.

[0272] The perturbation insertion position is used to ensure that the perturbation witness area avoids the main response area.

[0273] The perturbation response feature extraction window is used to extract the target perturbation response features from the data fragment corresponding to the response summary at the sampling time.

[0274] Preferably, the lower limit of the perturbation amplitude is greater than the identification amplitude of the perturbation response feature, and the identification amplitude of the perturbation response feature is determined by the on-site static sampling noise, the resolution of the target industrial instrument, and the quantization error of the acquisition channel.

[0275] Preferably, the upper limit of the perturbation amplitude is less than the alarm trigger amplitude of the target industrial instrument. The alarm trigger amplitude is determined by the alarm settings of the target industrial instrument, the process interlock threshold, and the abnormal judgment rules of the remote operation and maintenance platform.

[0276] The design of the upper and lower limits of the perturbation amplitude mentioned above enables the perturbation input to form a recognizable live trace of the measurement chain, while reducing the impact on production alarms, interlocking actions, and the generation of candidate calibration parameters.

[0277] Preferably, the lower limit of the perturbation duration is greater than the sampling period of the target industrial instrument, so that the perturbation response characteristics can be covered by at least two sampling points.

[0278] Preferably, the upper limit of the perturbation duration is less than one-third of the sampling window length of the main response region, so that the perturbation input does not occupy the stable response segment used for generating candidate tuning parameters.

[0279] Preferably, the perturbation insertion position is set during the isolation period after the main response zone ends or before the main response zone begins.

[0280] Preferably, when the perturbation input is arranged before the start of the main response zone, the main response zone should begin after the target industrial instrument response has recovered to a stable waiting condition.

[0281] Preferably, when the perturbation input is arranged after the main response region ends, the perturbation witness region should begin after the main response region segment boundary marking is completed.

[0282] The aforementioned perturbation response feature extraction window may include a baseline window, a perturbation window, and a recovery window.

[0283] The baseline window described above is used to record the stable response level of the target industrial instrument before the perturbation input is applied.

[0284] The aforementioned perturbation window is used to record the response direction and response arrival time of the target industrial instrument during the application of the perturbation input.

[0285] The recovery window described above is used to record the response recovery trend of the target industrial instrument after the perturbation input ends.

[0286] In this embodiment, the parameter selection of the explicit standard source challenge sequence is used to ensure that the candidate calibration parameters have a basis for multi-point response deviation, and the parameter selection of the implicit perturbation watermark sequence is used to ensure that the measurement chain live witness summary has an identifiable, traceable response trace that does not participate in the calibration calculation.

[0287] In this embodiment, the segment isolation between the main response area and the perturbation witness area prevents the perturbation input from entering the candidate calibration parameter generation process. The candidate parameter source binding information also enables the measurement chain formed by the perturbation witness area to participate in the solidification gating. Therefore, the above parameter selection can simultaneously serve the maintenance of calibration accuracy and data security protection.

[0288] Example 5:

[0289] Figure 2 This is a structural block diagram of a data security protection system for remote calibration of industrial instruments via the Internet of Things, provided as an embodiment of the present invention.

[0290] The aforementioned IoT-based industrial instrument remote calibration data security protection system includes a remote calibration constraint generation module, a standard input control module, a response acquisition module, a restricted calibration module, a separate sampling witness module, a source binding module, a gating and solidification module, and a lineage output module.

[0291] The remote calibration constraint generation module is used to generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence.

[0292] A standard input control module is used to generate standard input control information based on the explicit standard source challenge sequence, and to superimpose perturbation inputs corresponding to the implicit perturbation watermark sequence in at least a portion of the standard input points;

[0293] The response acquisition module is used to acquire the field physical response sequence corresponding to the target industrial instrument and generate a response summary at the sampling time.

[0294] The constrained calibration module is used to divide the field physical response sequence into a main response region and a perturbation witness region, and generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence.

[0295] A separate sampling witness module is used to extract perturbation response features from the perturbation witness region and generate a measurement chain live witness summary;

[0296] The source binding module is used to generate candidate parameter source binding information based on the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the sampling time response summary, the measurement chain live witness summary, the candidate calibration parameters, the candidate parameter generation trajectory, and the current parameter summary of the parameter area to be calibrated.

[0297] The gated solidification module is used to verify the source binding information of the candidate parameters, and solidify the candidate calibration parameters to the formal measurement reference area when the verification is successful;

[0298] The lineage output module is used to generate a measurement chain live reference lineage identifier after the candidate calibration parameters are solidified into the formal measurement reference area, and to make subsequent measurement data carry the measurement chain live reference lineage identifier.

[0299] Example 6:

[0300] This embodiment uses remote range correction of a pressure transmitter as an example to illustrate the execution process of the data security protection method for remote calibration of IoT industrial instruments described above.

[0301] The target industrial instrument is a pressure transmitter with a range of zero to one MPa. The parameter areas to be calibrated are the range parameter area and the zero point parameter area. The calibration target type is range correction.

[0302] The remote calibration request includes the target industrial instrument identifier PT-101, the parameter area identifier to be calibrated SPAN-ZERO, the calibration target type identifier RANGE-CAL, the request initiation time, the work order number, and the initiating entity identifier.

[0303] The remote calibration constraint generation module queries the instrument file based on the target industrial instrument identifier PT-101 to obtain the identification amplitude of the target industrial instrument's range, accuracy class, sampling period, response time constant, alarm trigger amplitude, and perturbation response characteristics.

[0304] The remote calibration constraint generation module reads the current parameter summary of the parameter area to be calibrated based on the identifier SPAN-ZERO, and confirms that the formal measurement reference area corresponding to the current parameter summary is in a state that allows remote calibration.

[0305] The remote calibration constraint generation module generates a remote calibration intent constraint package based on the calibration target type identifier RANGE-CAL. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence.

[0306] The above-mentioned adjustment range constraints are set so that the changes in the zero-point parameter and the range parameter do not exceed the allowable range of the work order, and the candidate adjustment parameters must not cause the pressure transmitter output to exceed the effective output range corresponding to the range of zero to one MPa.

[0307] The above-mentioned calibration effective window is set to be valid for a limited time period starting from the time the remote calibration intent constraint package is generated, and it is required that standard input execution, on-site physical response sequence acquisition, candidate calibration parameter generation, and candidate parameter source binding information generation all occur within the above-mentioned calibration effective window.

[0308] The aforementioned explicit standard source challenge sequence includes three discontinuous standard input points, namely 0.50 MPa, 0.90 MPa, and 0.10 MPa.

[0309] The dominant standard source challenge sequences were applied in the order of 0.50 MPa, 0.90 MPa, and 0.10 MPa, so that the dominant standard source challenge sequences did not adopt a continuous order from low to high or from high to low.

[0310] Each of the above standard input points is configured with a stabilization wait condition and a sampling window offset. The stabilization wait condition is used to confirm that the pressure transmitter output response has entered a stable state, and the sampling window offset is used to determine the sampling start point of the main response area.

[0311] The aforementioned latent perturbation watermark sequence sets perturbation inputs at standard input points of 0.50 MPa and 0.90 MPa, and configures perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window, respectively.

[0312] The aforementioned perturbation amplitude is less than the alarm trigger amplitude of the pressure transmitter and greater than the identification amplitude of the perturbation response characteristics, so that the perturbation input can be identified by the response acquisition module without triggering the alarm logic.

[0313] The standard input control module generates standard input control information based on the explicit standard source challenge sequence and controls the pressure calibrator to output standard pressures in the order of 0.50 MPa, 0.90 MPa and 0.10 MPa.

[0314] After the standard input control module stabilizes at the 0.50 MPa standard input point, it superimposes a short-term positive perturbation input according to the implicit perturbation watermark sequence, and then recovers to the 0.50 MPa standard input point after the perturbation duration ends.

[0315] After the standard input control module stabilizes at the 0.90 MPa standard input point, it superimposes a short-term reverse perturbation input according to the implicit perturbation watermark sequence, and restores to the 0.90 MPa standard input point after the perturbation duration ends.

[0316] The response acquisition module acquires the pressure transmitter output response and generates a field physical response sequence during the execution of standard input control information and perturbation input by the pressure calibrator.

[0317] The response acquisition module performs time alignment, abnormal sampling point marking, duplicate sampling point marking, and sampling gap marking on the on-site physical response sequence, and then generates a response summary at the sampling time.

[0318] The constrained calibration module determines three main response zones from the field physical response sequence based on the stable waiting conditions and sampling window offsets of each standard input point in the explicit standard source challenge sequence.

[0319] The constrained calibration module determines two perturbation witness areas from the field physical response sequence based on the perturbation insertion position, perturbation duration, and perturbation response feature extraction window in the latent perturbation watermark sequence.

[0320] The constrained calibration module reads the stable response values ​​from the three main response regions and compares them with the standard input points of 0.50 MPa, 0.90 MPa and 0.10 MPa, respectively, to obtain the corresponding response deviations.

[0321] The constrained calibration module determines zero-point offset information based on the response deviation corresponding to the 0.10 MPa standard input point, range offset information based on the response deviation corresponding to the 0.90 MPa standard input point, and local nonlinear offset information based on the response deviation corresponding to the 0.50 MPa standard input point.

[0322] The constrained calibration module generates candidate calibration parameters within the range limited by the calibration amplitude constraint, based on zero offset information, range offset information, and local nonlinear offset information.

[0323] The constrained calibration module records the process of reading the stable response value from the main response area, calculating the response deviation, determining the offset information, and generating candidate calibration parameters, thus forming a candidate parameter generation trajectory.

[0324] The separate sampling witness module extracts response direction features, response arrival time features, response recovery trend features, and perturbation window summaries from the two perturbation witness regions, respectively.

[0325] The separate sampling witness module generates a measurement chain live witness summary based on the perturbation response characteristics of the two perturbation witness regions.

[0326] The source binding module generates candidate parameter source binding information based on the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the sampling time response summary, the measurement chain live witness summary, the candidate calibration parameters, the candidate parameter generation trajectory, and the current parameter summary of the parameter area to be calibrated.

[0327] The gated binding module verifies the source binding information of the candidate parameters and determines whether the candidate calibration parameters originate from the response deviations in the main response regions corresponding to 0.50 MPa, 0.90 MPa, and 0.10 MPa.

[0328] The gated solidification module determines whether the measurement chain live witness summary matches the implicit perturbation watermark sequence superimposed within the 0.50 MPa and 0.90 MPa standard input points.

[0329] The gated solidification module determines whether the candidate parameter generation trajectory references the data segment corresponding to the perturbation witness area, and continues to perform solidification verification if it does not reference the data segment corresponding to the perturbation witness area.

[0330] The gated binding module determines whether the candidate calibration parameters are inherited from the current parameter summary of the parameter area to be calibrated, and determines that the candidate parameter source binding information verification is passed when the inheritance relationship meets the preset binding conditions.

[0331] After the candidate parameter source binding information is verified, the gated binding module will bind the candidate calibration parameters to the formal measurement reference area of ​​the pressure transmitter.

[0332] After the candidate calibration parameters are fixed to the formal measurement reference area, the lineage output module generates a measurement chain live reference lineage identifier and makes the pressure measurement data output by the pressure transmitter carry the above measurement chain live reference lineage identifier.

[0333] When the remote operation and maintenance platform receives subsequent pressure measurement data, it matches the measurement chain live baseline lineage identifier carried in the subsequent pressure measurement data with the binding information of the most recent candidate parameter source.

[0334] When the measurement chain live reference lineage identifier carried by the subsequent pressure measurement data matches the source binding information of the most recent candidate parameter, the aforementioned subsequent pressure measurement data enters the normal trusted data processing flow.

[0335] When the measurement chain live reference lineage identifier carried by subsequent pressure measurement data does not match the binding information of the most recent candidate parameter source, the aforementioned subsequent pressure measurement data is marked as untrusted measurement data and is restricted from entering the subsequent remote calibration closed loop.

[0336] Based on the preferred embodiments of the present invention described above, those skilled in the art can make various changes and modifications without departing from the inventive concept. The technical scope of this invention is not limited to the contents of the specification, but must be determined according to the scope of the claims.

Claims

1. A data security protection method for remote calibration of industrial instruments via the Internet of Things, characterized in that, Includes the following steps: S1. Obtain a remote calibration request for the target industrial instrument, and determine the target industrial instrument, the parameter area to be calibrated, and the calibration target type based on the remote calibration request; S2. Generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence. S3. Generate standard input control information based on the explicit standard source challenge sequence, and superimpose the perturbation input corresponding to the implicit perturbation watermark sequence into at least a portion of the standard input points corresponding to the explicit standard source challenge sequence to obtain the standard input execution result; S4. Obtain the field physical response sequence of the target industrial instrument corresponding to the standard input control information and the perturbation input, and generate a sampling time response summary based on the field physical response sequence; S5. Divide the on-site physical response sequence into a main response area and a perturbation witness area. The main response area corresponds to the explicit standard source challenge sequence, and the perturbation witness area corresponds to the implicit perturbation watermark sequence. The main response area and the perturbation witness area are isolated from each other in terms of data segments. S6. Generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence, and extract perturbation response features from the perturbation witness region to generate a measurement chain live witness summary. S7. Generate candidate parameter source binding information based on the explicit standard source challenge sequence, implicit perturbation watermark sequence, sampling time response summary, measurement chain live witness summary, candidate calibration parameters, candidate parameter generation trajectory and current parameter summary of the parameter area to be calibrated; S8. Verify the source binding information of the candidate parameters to determine whether the candidate calibration parameters originate from the main response area corresponding to the explicit standard source challenge sequence, and determine whether the measurement chain live witness summary matches the implicit perturbation watermark sequence. S9. When the candidate parameter source binding information verification passes, the candidate calibration parameter is fixed to the formal measurement reference area; when the candidate parameter source binding information verification fails, the candidate calibration parameter is prohibited from being written to the formal measurement reference area, and the candidate calibration parameter is cleared. S10. After the candidate calibration parameters are solidified into the formal measurement reference area, a measurement chain live reference lineage identifier is generated, and the subsequent measurement data output by the target industrial instrument carries the measurement chain live reference lineage identifier.

2. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, The explicit standard source challenge sequence includes at least three non-contiguous standard input points, the order in which the standard input points are applied, the stable wait condition corresponding to each standard input point, and the sampling window offset; The implicit perturbation watermark sequence includes perturbation amplitude, perturbation direction, perturbation duration, perturbation insertion position, and perturbation response feature extraction window.

3. The data security protection method for remote calibration of IoT industrial instruments according to claim 2, characterized in that, The perturbation amplitude is less than the alarm trigger amplitude of the target industrial instrument, but greater than the identification amplitude of the perturbation response feature; The perturbation input is used to form an identifiable measurement chain live trace in the field physical response sequence, and the data segment corresponding to the perturbation input does not participate in the generation of candidate calibration parameters.

4. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, In the field physical response sequence corresponding to the same standard input point, the stable response segment after satisfying the stable waiting condition is selected as the main response region, and the response perturbation segment formed after superimposing perturbation input is selected as the perturbation witness region. When generating candidate calibration parameters, the data segments corresponding to the perturbation witness area are excluded.

5. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, Candidate calibration parameters are generated based on the response deviation between the main response region and the explicit standard source challenge sequence, including: Zero-point offset information, range offset information, and local nonlinear offset information are determined based on the response deviations corresponding to different standard input points. Based on the zero-point offset information, range offset information, and local nonlinear offset information, the candidate calibration parameters are generated within the range defined by the calibration amplitude constraint.

6. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, Perturbation response features are extracted from the perturbation witness region to generate a measurement chain live witness summary, including: Extract the response direction features, response arrival time features, response recovery trend features, and perturbation window summary from the perturbation witness area; Based on the response direction characteristics, response arrival time characteristics, response recovery trend characteristics, and perturbation window summary, a measurement chain live witness summary is generated to prove the existence of a real physical correlation between the standard input, instrument response, and response acquisition.

7. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, After generating the response summary at the sampling time, a extraction window is determined for verifying the perturbation response characteristics; Extract the target perturbation response features from the data segment corresponding to the response summary at the sampling time according to the extraction window; The measurement chain live witness summary is verified based on the matching relationship between the target perturbation response characteristics and the implicit perturbation watermark sequence.

8. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, The source binding information of the candidate parameters is validated, including: Verify the correspondence between the explicit standard source challenge sequence and the main response region; Verify the correspondence between the implicit perturbation watermark sequence and the measurement chain live witness summary; Verify the correspondence between the candidate parameter generation trajectory and the response deviation of the main response region; Verify the inheritance relationship between the candidate tuning parameters and the current parameter summary of the parameter region to be tuned; When both the above correspondence and inheritance relationships meet the preset solidification conditions, the verification of the candidate parameter source binding information is confirmed to be successful.

9. The data security protection method for remote calibration of IoT industrial instruments according to claim 1, characterized in that, When the measurement chain live reference lineage identifier carried by the subsequent measurement data does not match the binding information of the most recent candidate parameter source, the subsequent measurement data is marked as untrusted measurement data, and the untrusted measurement data is restricted from entering the subsequent remote calibration closed loop.

10. A data security protection system for remote calibration of industrial instruments via the Internet of Things, characterized in that, include: The remote calibration constraint generation module is used to generate a remote calibration intent constraint package based on the target industrial instrument, the parameter area to be calibrated, and the calibration target type. The remote calibration intent constraint package includes calibration amplitude constraints, calibration effective window, explicit standard source challenge sequence, and implicit perturbation watermark sequence. A standard input control module is used to generate standard input control information based on the explicit standard source challenge sequence, and to superimpose perturbation inputs corresponding to the implicit perturbation watermark sequence in at least a portion of the standard input points; The response acquisition module is used to acquire the field physical response sequence corresponding to the target industrial instrument and generate a response summary at the sampling time. The constrained calibration module is used to divide the field physical response sequence into a main response region and a perturbation witness region, and generate candidate calibration parameters based on the response deviation between the main response region and the explicit standard source challenge sequence. A separate sampling witness module is used to extract perturbation response features from the perturbation witness region and generate a measurement chain live witness summary; The source binding module is used to generate candidate parameter source binding information based on the explicit standard source challenge sequence, the implicit perturbation watermark sequence, the sampling time response summary, the measurement chain live witness summary, the candidate calibration parameters, the candidate parameter generation trajectory, and the current parameter summary of the parameter area to be calibrated. The gated solidification module is used to verify the source binding information of the candidate parameters, and solidify the candidate calibration parameters to the formal measurement reference area when the verification is successful; The lineage output module is used to generate a measurement chain live reference lineage identifier after the candidate calibration parameters are solidified into the formal measurement reference area, and to make subsequent measurement data carry the measurement chain live reference lineage identifier.

Images