Semantic binding identification and release control method and system for dcs sensitive instructions

Abstract

The application provides a DCS sensitive instruction semantic binding identification and release control method and system, the method comprises the following steps: obtaining a DCS instruction request to be executed, and parsing the DCS instruction request to obtain a semantic set; determining the semantic set according to a preset sensitive rule set to obtain a sensitive level; collecting multiple identification factors including at least a security key factor and a user fingerprint factor, and calculating a credibility score according to the multiple identification factors; constructing a semantic binding abstract according to the semantic set, and calculating a response value according to the binding abstract; generating a challenge value containing at least a random number and a time window identifier, and performing verification; and releasing the DCS instruction request when the credibility score is not lower than a threshold corresponding to the sensitive level and all verifications are passed. The application can improve the safety and controllability of sensitive operations and meet the requirements of the security evaluation compliance without significantly affecting the real-time performance of the control business.

Description

Technical Field

[0001] This invention relates to the field of security protection and cryptographic application technology for power production control systems, and in particular to a semantic binding identification and release control method and system for sensitive DCS commands. Background Technology

[0002] As the core system of the production control area, the DCS (Distributed Control System) undertakes critical operations such as monitoring, parameter tuning, configuration modification, logic enforcement, start / stop control, and download / download. Existing security measures mostly focus on channel-side hardening or login-side authentication (e.g., static passwords, multi-factor login, and maintenance audit channel control), but these measures still have the following shortcomings in engineering practice: 1) Authentication and instructions are not strongly bound: After login, sensitive operations are usually executed continuously during the session validity period. There is no one-to-one correspondence between authentication strength and specific instruction content (object, operation type, parameter range, etc.), which can easily lead to the risk of "logged in but exceeding authority / misoperation". 2) Insufficient anti-replay and out-of-order control: In cases of network jitter, link retransmission, and command caching, the lack of anti-replay / out-of-order verification mechanisms based on time windows, random numbers, and sequence numbers may lead to repeated execution, out-of-order execution, or abnormal writing to critical objects. 3) Inadequate hierarchical control: Coarse-grained authorization based only on roles or areas of responsibility makes it difficult to implement stronger identification or shorter-term instruction-level control for high-risk instructions such as "force / download / configuration rewriting / outbound parameter writing"; 4) Insufficient coupling between national cryptographic dynamic authentication and control links: Existing solutions often remain at the level of general authentication or channel encryption, and have not formed a national cryptographic challenge response verification and real-time release mechanism that is semantically bound to sensitive instructions.

[0003] Therefore, there is an urgent need for a sensitive instruction control method that meets the requirements of confidentiality assessment and national cryptographic compliance, so that the identification results are strongly bound to the specific sensitive instructions, and has the ability to resist replay, out-of-order verification and graded release, thereby improving the authenticity, controllability and security of sensitive operations. Summary of the Invention

[0004] The purpose of this invention is to provide a semantic binding identification and release control method and system for DCS sensitive instructions, aiming to solve the problems existing in the prior art, such as weak identification and instruction binding, insufficient anti-replay and out-of-order control, insufficient hierarchical control, and insufficient coupling of national cryptographic dynamic identification and control links.

[0005] In a first aspect, the present invention provides a method for semantic binding identification and release control of DCS sensitive commands, the method comprising: Obtain the DCS instruction request to be executed, and parse the DCS instruction request to obtain a semantic set that includes at least the responsibility area identifier, user identifier, session identifier, object identifier, opcode, operation type, parameter range and payload summary. Then, determine the semantic set according to the preset sensitive rule set to obtain the sensitivity level. Collect multiple authentication factors, including at least security key factors and user fingerprint factors, and calculate a credibility score based on the multiple authentication factors; A semantic binding summary is constructed based on the semantic set, and a response value is calculated based on the binding summary; Generate a challenge value that includes at least a random number and a time window identifier, and perform validity period verification, integrity verification, and anti-replay verification on the binding digest, challenge value, and response value. When the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, the DCS command request is allowed.

[0006] In some embodiments, the step of collecting at least a plurality of authentication factors, including a security key factor and a user fingerprint factor, and calculating a credibility score based on the plurality of authentication factors includes: Collect a set of discriminant factors The set of identification factors includes at least a security key factor and a user fingerprint factor, and a sub-score is calculated for each factor. Calculate the credibility score based on the weighted vector:

[0007] in Let be the weight vector of the i-th discriminant factor, and , , These are the 1st and nth discriminant factors in the discriminant factor set, respectively.

[0008] In some embodiments, the sensitivity level includes general sensitivity, high sensitivity, and extremely high sensitivity; The step of determining the sensitivity level of the semantic set based on a preset set of sensitivity rules includes: The responsibility region identifiers in the semantic set are compared with the responsibility regions bound to the object identifiers. If they do not match, the sensitivity level is raised to [level missing]. or ; The operation type is identified; if it is a download or configuration modification operation, the sensitivity level is raised to [level missing]. ; The parameter range is compared with a preset whitelist. If the parameter exceeds the whitelist range, the execution of the instruction is rejected or a secondary authentication is forcibly triggered.

[0009] In some embodiments, the step of constructing a semantic binding summary based on the semantic set includes: Obtain the current timestamp and policy version number, and concatenate the user identifier, session identifier, target node identifier, responsibility area identifier, object identifier, opcode, operation type, parameter range, and payload summary in the semantic set with the current timestamp and policy version number in sequence to obtain the concatenated string; The concatenated string is hashed using the SM3 algorithm to obtain a semantic binding digest.

[0010] In some embodiments, the step of calculating the response value based on the binding digest includes: On the authentication side, it is based on national cryptographic algorithms and key identifiers. Calculate response value ,in It is generated by at least one of the following formulas: ,or , in, For the reason Derived session key, This is a message authentication code calculation function implemented based on the Chinese national cryptographic algorithm SM4. For session key, For semantic binding summary, For timestamps, This is a digital signature function implemented based on the SM2 elliptic curve public-key cryptography algorithm, For key identification, It is the national cryptographic hash algorithm.

[0011] In some embodiments, the step of generating a challenge value that includes at least a random number and a time window identifier includes: Generate a random number and determine the time window. Generation and Time Window Corresponding time window identifier ; Generate monotonically increasing sequence numbers , random number Time window indicator Serial Number Combine items to gain challenge points. .

[0012] In some embodiments, the step of performing validity period verification, integrity verification, and replay resistance verification on the binding digest, challenge value, and response value, and allowing the DCS command request when the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, includes: Get the current time, calculate the difference between the current time and the timestamp in the bound digest. If the absolute value of the difference is less than or equal to the time window, the validity period verification passes; otherwise, the instruction execution is rejected. The response value is verified for integrity. If the response value is in the form of a message authentication code, the national cryptographic standard No. 4 algorithm is used for verification. If it is in the form of a signature, the national cryptographic standard No. 2 algorithm is used for signature verification. Check if the same random number appears repeatedly under the same session ID. If the number of occurrences reaches a preset threshold, it is determined to be a replay, triggering locking or forced secondary authentication. Check if the sequence number in the challenge value is greater than the maximum received sequence number maintained by the release side. If so, pass the out-of-order check and update the maximum received sequence number; otherwise, reject the instruction execution.

[0013] Secondly, the present invention provides a device anti-malfunction system based on the restart of a distributed control system (DPU), the system comprising: The first detection module is used to detect whether a DPU restart event has occurred. The scan cycle identification module is used to identify whether the current scan cycle is the first scan cycle after the restart when a DPU restart is detected. The data reading module is used to read the actual status feedback value of the control device during the first scanning cycle. The second detection module is used to determine the relationship between the actual state feedback value and the current output command. The alternative operation module is used to output the actual state feedback value as a control command to replace the original output command when the actual state feedback value is greater than a preset threshold and the current output command is less than or equal to zero.

[0014] Thirdly, the present invention provides a storage medium that stores one or more programs, which, when executed by a processor, implement the above-described semantic binding identification and release control method for DCS sensitive instructions.

[0015] Fourthly, the present invention provides an electronic device, the electronic device comprising a memory and a processor, wherein: The memory is used to store computer programs; When the processor executes a computer program stored in the memory, it implements the aforementioned semantic binding identification and release control method for DCS sensitive instructions.

[0016] Compared with the prior art, the present invention has the following advantages: This invention extracts semantic elements such as the object, opcode, operation type, parameter range, and payload digest of sensitive instructions, constructs a semantic binding digest, and generates a national cryptographic challenge value. Combining the results of multi-factor weighted authentication such as security keys and user fingerprints, the challenge response is validated for validity, integrity, and anti-replay / out-of-order processing. Under hierarchical threshold constraints, it enables instruction-level release, rejection, or downgrading of sensitive instructions, thereby improving the security and controllability of sensitive operations and meeting the requirements of cryptographic evaluation compliance without significantly affecting the real-time performance of control services. Attached Figure Description

[0017] Figure 1 This is a flowchart of a method for semantic binding identification and release control of DCS sensitive commands in one embodiment of the present invention; Figure 2 This is a schematic diagram of the structure of a DCS sensitive command semantic binding identification and release control system according to an embodiment of the present invention.

[0018] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. Unless otherwise defined, the technical or scientific terms used herein should have the ordinary meaning understood by those skilled in the art. The terms "comprising" and similar expressions used herein mean that the element or object preceding the word covers the element or object listed after the word and its equivalents, but does not exclude other elements or objects.

[0020] Example 1 like Figure 1 As shown, an embodiment of the present invention proposes a semantic binding identification and release control method for DCS sensitive commands, the method including steps S101 to S104, wherein: Step S101: Obtain the DCS instruction request to be executed, and parse the DCS instruction request to obtain a semantic set that includes at least the responsibility area identifier, user identifier, session identifier, object identifier, operation code, operation type, parameter range and payload summary. Then, determine the semantic set according to the preset sensitive rule set to obtain the sensitivity level. It should be noted that this step first obtains the DCS instruction request to be executed. By parsing the instruction message and extracting its fields, key semantic elements such as the responsibility area identifier, user identifier, session identifier, object identifier, opcode, operation type, parameter range, and payload summary are extracted to form a semantic set describing the complete context of the instruction. Subsequently, this semantic set is matched and judged according to a pre-configured set of sensitivity rules, such as checking whether the responsibility area and object match, whether the operation type is a high-risk operation, and whether the parameters are out of bounds, thereby outputting the sensitivity level corresponding to the instruction. This process transforms the raw instructions in the distributed control system into a structured semantic description, providing a basis for the subsequent execution of differentiated security policies. Specifically, in some embodiments, the sensitivity level includes at least: ,in For general sensitivity, For high sensitivity, For extremely high sensitivity, the specific determination method is as follows: The responsibility region identifiers in the semantic set are compared with the responsibility regions bound to the object identifiers. If they do not match, the sensitivity level is raised to [level missing]. or ; The operation type is identified; if it is a download or configuration modification operation, the sensitivity level is raised to [level missing]. ; The parameter range is compared with a preset whitelist. If the parameter exceeds the whitelist range, the execution of the instruction is rejected or a secondary authentication is forcibly triggered.

[0021] Step S102: Collect multiple authentication factors, including at least a security key factor and a user fingerprint factor, and calculate a credibility score based on the multiple authentication factors; It should be noted that security key factors typically originate from hardware key devices or cryptographic modules, while user fingerprint factors originate from biometric data collection devices. After calculating sub-scores for each authentication factor, they are weighted and summed according to a preset weight vector to obtain a final credibility score between zero and one. This score reflects the overall credibility of the operator at the moment of command execution. Different factors can complement each other; for example, even if the fingerprint recognition score is slightly lower due to environmental factors, if the hardware key verification is successful and has a high weight, the overall score may still meet the release requirements, thus balancing security and usability.

[0022] Specifically, collecting a set of discriminant factors The set of identification factors includes at least a security key factor and a user fingerprint factor, and a sub-score is calculated for each factor. Calculate the credibility score based on the weighted vector:

[0023] in Let be the weight vector of the i-th discriminant factor, and , , These are the 1st and nth discriminant factors in the discriminant factor set, respectively.

[0024] Furthermore, in some embodiments, the security key factor It is at least one of a device key, a UKey key, or a session key derived from a cryptographic device, and the sub-score is... Satisfying: When verification is successful and the version matches When the verification is successful but the version does not match When verification fails or expires User fingerprint factor The matching similarity is .

[0025] In addition, the weight vector At least satisfy the preferred range: security key factor User fingerprint factor .

[0026] Step S103: Construct a semantic binding summary based on the semantic set, and calculate the response value based on the binding summary; First, using the previously extracted semantic set, combined with the current timestamp and policy version number, a digest value uniquely binding the semantic content of the instruction is constructed using the national cryptographic algorithm SM3. This digest ensures an immutable binding relationship between the key elements of the instruction (such as the target object and parameter range) and the authentication process. Then, on the authentication side, based on this semantic binding digest and the timestamp, a response value is calculated using a national cryptographic algorithm (such as the SM4 message authentication code mode or the SM2 digital signature mode). This response value serves as a dynamic authentication credential, ensuring that each instruction execution depends on the current challenge rather than a static password, thus effectively preventing the reuse and forgery of authentication results.

[0027] Specifically, in some embodiments, the current timestamp and policy version number are obtained, and the user identifier, session identifier, target node identifier, responsibility area identifier, object identifier, opcode, operation type, parameter range, and payload digest in the semantic set are concatenated with the current timestamp and policy version number in sequence to obtain a concatenated string; the SM3 algorithm is used to perform hash calculation on the concatenated string to obtain a semantic binding digest.

[0028] Furthermore, in some embodiments, the authentication side is based on national cryptographic algorithms and key identifiers. Calculate response value ,in It is generated by at least one of the following formulas: ,or , in, For the reason Derived session key, This is a message authentication code calculation function implemented based on the Chinese national cryptographic algorithm SM4. For session key, For semantic binding summary, For timestamps, This is a digital signature function implemented based on the SM2 elliptic curve public-key cryptography algorithm, a national standard in China. For key identification, It is the national cryptographic hash algorithm.

[0029] Step S104: Generate a challenge value that includes at least a random number and a time window identifier, and perform validity period verification, integrity verification, and anti-replay verification on the binding digest, challenge value, and response value. When the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, the DCS command request is released.

[0030] It should be noted that the challenge value must include at least a random number of sufficient length and a time window identifier for subsequent anti-replay and timeliness control. Subsequently, the binding digest, challenge value, and response value generated in step S103 undergo triple verification: validity period verification prevents expired instructions from being executed by comparing the difference between the current time and the timestamp in the digest to ensure it falls within the allowed time window; integrity verification confirms that the digest and challenge value have not been tampered with during transmission by recalculating and comparing the response value; and anti-replay verification identifies and prevents replay attacks and out-of-order old instructions by checking whether the random number appears repeatedly in the same session and whether the sequence number monotonically increases. When the credibility score calculated in step S102 is not lower than the threshold corresponding to the sensitivity level of the instruction, and all the above verifications pass, the system finally allows the instruction to enter the DCS for execution; otherwise, it performs rejection or downgrade processing based on the degree of failure.

[0031] Specifically, in some embodiments, a random number is generated. and determine the time window. Generation and Time Window Corresponding time window identifier Then, a monotonically increasing sequence number is generated. , random number Time window indicator Serial Number Combine items to gain challenge points. .

[0032] During the verification process, the current time is first obtained, and the difference between the current time and the timestamp in the bound digest is calculated. If the absolute value of the difference is less than or equal to the time window, the validity period verification passes; otherwise, the instruction execution is rejected. The response value is then subjected to integrity verification. If the response value is in the form of a message authentication code, the national cryptographic standard No. 4 algorithm is used for verification; if it is in the form of a signature, the national cryptographic standard No. 2 algorithm is used for signature verification. The system checks whether the same random number appears repeatedly under the same session identifier. If the number of occurrences reaches a preset threshold, it is determined to be a replay, triggering locking or forced secondary authentication. Finally, the system checks whether the sequence number in the challenge value is greater than the maximum received sequence number maintained by the release side. If so, it passes the out-of-order verification and updates the maximum received sequence number; otherwise, the instruction execution is rejected or downgraded. The downgraded processing includes at least read-only access. Secondary identification or minimum permissions .

[0033] In addition, in some embodiments, it is also necessary to include the semantic elements and sensitivity levels of the instructions. Scoring, verification conclusions and triggering reasons Record the data to the log audit and analysis system or the account management and operation and maintenance audit system, and generate an alarm when the continuous failure or replay risk meets the triggering conditions.

[0034] In summary, this embodiment has at least the following beneficial effects: 1) Incorporate the key semantics of sensitive instructions (object, operation type, parameter range, payload summary, etc.) into the semantic binding summary to ensure that the identification corresponds one-to-one with the specific instructions, thereby avoiding the risk of unauthorized and misoperation caused by "arbitrary sensitive operations after login"; 2) Challenge response verification is implemented based on national cryptographic algorithms, making instruction release dependent on dynamic credentials rather than static passwords, thereby improving authentication strength and compliance; 3) By using time windows, random number deduplication, and sequence number monotonic constraints, anti-replay and out-of-order verification are achieved, reducing the risk of repeated or out-of-order execution caused by link retransmission / jitter; 4) Set different thresholds and validity periods according to the sensitivity level, trigger secondary identification, threshold upgrading or downgrading for high-risk instructions, and achieve more granular security control; 5) By designing constraints such as maximum verification delay and degradation strategies, security is enhanced while minimizing disturbances to DCS control services, thus ensuring business continuity.

[0035] Example 2 like Figure 2 As shown, one embodiment of the present invention proposes a semantic binding identification and release control system for DCS sensitive commands, the system comprising: The instruction parsing module 10 is used to obtain the DCS instruction request to be executed, and parse the DCS instruction request to obtain a semantic set including at least the responsibility area identifier, user identifier, session identifier, object identifier, opcode, operation type, parameter range and payload summary, and to determine the sensitivity level of the semantic set according to a preset sensitive rule set. The scoring calculation module 20 is used to collect multiple authentication factors, including at least a security key factor and a user fingerprint factor, and calculate a credibility score based on the multiple authentication factors. The summary construction module 30 is used to construct a semantic binding summary based on the semantic set and to calculate a response value based on the binding summary; The verification module 40 is used to generate a challenge value that includes at least a random number and a time window identifier, and to perform validity period verification, integrity verification and anti-replay verification on the binding summary, challenge value and response value. When the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, the DCS command request is allowed.

[0036] Example 3 An embodiment of the present invention also proposes a storage medium on which one or more programs are stored, which, when executed by a processor, implement the above-described semantic binding identification and release control method for DCS sensitive instructions.

[0037] Example 4 An embodiment of the present invention also proposes an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory to implement the above-mentioned semantic binding identification and release control method for DCS sensitive instructions.

[0038] Those skilled in the art will understand that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can mean any means that can contain stored, communicated, propagated, or transmitted programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0039] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0040] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0041] While embodiments of the present invention have been described in detail above, it will be apparent to those skilled in the art that various modifications and variations can be made to these embodiments. However, it should be understood that such modifications and variations fall within the scope and spirit of the invention as set forth in the claims. Furthermore, the invention described herein may have other embodiments and can be implemented or carried out in various ways.

Claims

1. A method for semantic binding identification and release control of DCS sensitive commands, characterized in that, The method includes: Obtain the DCS instruction request to be executed, and parse the DCS instruction request to obtain a semantic set that includes at least the responsibility area identifier, user identifier, session identifier, object identifier, opcode, operation type, parameter range and payload summary. Then, determine the semantic set according to the preset sensitive rule set to obtain the sensitivity level. Collect multiple authentication factors, including at least security key factors and user fingerprint factors, and calculate a credibility score based on the multiple authentication factors; A semantic binding summary is constructed based on the semantic set, and a response value is calculated based on the binding summary; Generate a challenge value that includes at least a random number and a time window identifier, and perform validity period verification, integrity verification, and anti-replay verification on the binding digest, challenge value, and response value. When the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, the DCS command request is allowed.

2. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The step of collecting at least a security key factor and a user fingerprint factor, and calculating a credibility score based on the multiple authentication factors, includes: Collect a set of discriminant factors The set of identification factors includes at least a security key factor and a user fingerprint factor, and a sub-score is calculated for each factor. Calculate the credibility score based on the weighted vector: in Let be the weight vector of the i-th discriminant factor, and , , These are the 1st and nth discriminant factors in the set of discriminant factors, respectively.

3. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The sensitivity levels include general sensitivity, high sensitivity, and extremely high sensitivity; The step of determining the sensitivity level of the semantic set based on a preset set of sensitivity rules includes: The responsibility region identifiers in the semantic set are compared with the responsibility regions bound to the object identifiers. If they do not match, the sensitivity level is raised to [level missing]. or ; The operation type is identified; if it is a download or configuration modification operation, the sensitivity level is raised to [level missing]. ; The parameter range is compared with a preset whitelist. If the parameter exceeds the whitelist range, the execution of the instruction is rejected or a secondary authentication is forcibly triggered.

4. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The step of constructing a semantic binding summary based on the semantic set includes: Obtain the current timestamp and policy version number, and concatenate the user identifier, session identifier, target node identifier, responsibility area identifier, object identifier, opcode, operation type, parameter range, and payload summary in the semantic set with the current timestamp and policy version number in sequence to obtain the concatenated string; The concatenated string is hashed using the SM3 algorithm to obtain a semantic binding digest.

5. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The step of calculating the response value based on the binding digest includes: On the authentication side, it is based on national cryptographic algorithms and key identifiers. Calculate response value ,in It is generated by at least one of the following formulas: ,or ， in, For the reason Derived session key, This is a message authentication code calculation function implemented based on the Chinese national cryptographic algorithm SM4. For session key, For semantic binding summary, For timestamps, This is a digital signature function implemented based on the SM2 elliptic curve public-key cryptography algorithm, a national standard in China. For key identification, It is the national cryptographic hash algorithm.

6. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The step of generating a challenge value that includes at least a random number and a time window identifier includes: Generate a random number and determine the time window. Generation and Time Window Corresponding time window identifier ; Generate monotonically increasing sequence numbers , random number Time window indicator Serial Number Combine items to gain challenge points. .

7. The semantic binding identification and release control method for DCS sensitive commands according to claim 1, characterized in that, The step of performing validity period verification, integrity verification, and replay resistance verification on the binding digest, challenge value, and response value, and allowing the DCS command request when the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, includes: Get the current time, calculate the difference between the current time and the timestamp in the bound digest, and if the absolute value of the difference is less than or equal to the time window, the validity period verification passes; otherwise, the instruction execution is rejected. The response value is verified for integrity. If the response value is in the form of a message authentication code, the national cryptographic standard No. 4 algorithm is used for verification. If it is in the form of a signature, the national cryptographic standard No. 2 algorithm is used for signature verification. Check if the same random number appears repeatedly under the same session ID. If the number of occurrences reaches a preset threshold, it is determined to be a replay, triggering locking or forced secondary authentication. Check if the sequence number in the challenge value is greater than the maximum received sequence number maintained by the release side. If so, pass the out-of-order check and update the maximum received sequence number; otherwise, reject the instruction execution.

8. A semantic binding identification and release control system for DCS sensitive commands, characterized in that, The system includes: The instruction parsing module is used to obtain the DCS instruction request to be executed, and parse the DCS instruction request to obtain a semantic set that includes at least the responsibility area identifier, user identifier, session identifier, object identifier, opcode, operation type, parameter range and payload summary, and to determine the sensitivity level of the semantic set according to a preset sensitivity rule set. The scoring calculation module is used to collect multiple authentication factors, including at least a security key factor and a user fingerprint factor, and calculate a credibility score based on the multiple authentication factors. The summary construction module is used to construct a semantic binding summary based on the semantic set, and to calculate a response value based on the binding summary; The verification module is used to generate a challenge value that includes at least a random number and a time window identifier, and to perform validity period verification, integrity verification and anti-replay verification on the binding summary, challenge value and response value. When the credibility score is not lower than the threshold corresponding to the sensitivity level and all verifications pass, the DCS command request is allowed.

9. An electronic device, characterized in that, The electronic device includes a memory and a processor, wherein: The memory is used to store computer programs; When the processor executes a computer program stored in the memory, it implements the semantic binding identification and release control method for DCS sensitive instructions as described in any one of claims 1-7.

10. A storage medium, characterized in that, The storage medium stores one or more programs that, when executed by a processor, implement the semantic binding identification and release control method for DCS sensitive instructions as described in any one of claims 1-7.

Images