Security access management system for terminal equipment

Abstract

The present application discloses a terminal device security access management system for industrial control systems, wherein the terminal device security access management system comprises a security management server and a switch connected to the security management server, wherein the switch is used to access the terminal device; the security management server is configured with an access database, wherein the access database stores unique identification codes of terminal devices that are allowed to access; when the terminal device accesses the switch, the accessed switch sends a message requesting authentication to the security management server, wherein the message requesting authentication includes the unique identification code of the terminal device requesting access; the security management server matches the received unique identification code with the unique identification code of the terminal device that is allowed to access and stored in the access database, and if the match is successful, sends an authentication success instruction to the switch; the switch responds to the authentication success instruction to allow the terminal device to access.

Description

Technical Field

[0001] The embodiments of the present application relate to industrial wired communication technology and industrial network security technology, and in particular, to a security access management system for terminal devices. Background Art

[0002] In industrial production scenarios, there are a large number of devices and industrial control systems that need to transmit and exchange data. Switches can connect these devices through multiple ports and transmit data at high speed. However, in the existing technology, most on-site industrial access layer switches are unmanaged devices that do not support industrial security access mechanisms. Terminal devices are not restricted in access and can be connected to the network at will, which brings great security risks. Utility Model Content

[0003] In order to solve the above technical problems, the utility model provides a security access management system for terminal equipment of an industrial control system.

[0004] The security access management system for terminal devices of an industrial control system provided by the present application includes: a security management server and a switch connected to the security management server, wherein:

[0005] The switch is used to access the terminal equipment;

[0006] The security management server is configured with an access database, and the access database stores unique identification codes of terminal devices that are allowed to access;

[0007] When a terminal device accesses a switch, the accessed switch sends a message requesting authentication to the security management server, wherein the message requesting authentication includes a unique identification code of the terminal device requesting access; the security management server matches the received unique identification code with the unique identification code of the terminal device allowed to access stored in the access database, and if the match is successful, sends an authentication success instruction to the switch; the switch responds to the authentication success instruction to allow the terminal device to access.

[0008] Optionally, the access database is a correspondence between a switch identification code and a unique identification code of a terminal device allowed to access; and,

[0009] The message requesting authentication includes the unique identification code of the terminal device requesting access and the identification code of the switch to be accessed.

[0010] Optionally, when replacing a switch, the identification code of the replaced switch is configured to be the same as the identification code of the replaced switch.

[0011] Optionally, the switch identification code is a switch name and / or a switch IP address.

[0012] Optionally, the unique identification code of the terminal device is the MAC address of the terminal device.

[0013] Optionally, one switch is directly connected to the security server, and other switches are connected to the security server via the switch directly connected to the security server.

[0014] Optionally, the switch is an industrial access layer switch.

[0015] Optionally, the industrial control system is a PLC control system or a DCS control system.

[0016] The positive and progressive effects of the utility model are:

[0017] The terminal equipment security access management system of the present application realizes the control of terminal equipment network access management and real-time monitoring of network access status. It performs access management based on the unique identification code of the terminal equipment, accurately defines the terminal equipment attributes and uniqueness, ensures the integrity of the control system and prevents illegal user intrusion; at the same time, the terminal equipment security access management system of the present application is not limited to the switch equipment deployed on site, and the replacement and replacement of the switch will not cause any configuration and modification impact. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The following drawings are only intended to illustrate and explain the present application, and do not limit the scope of the present application.

[0019] Figure 1 A schematic diagram of a security access management system for a terminal device according to an embodiment of the present application is shown;

[0020] Figure 2 A schematic diagram showing a replacement switch and a replacement access port of a switch of a security access management system for a terminal device according to an embodiment of the present application is shown;

[0021] Figure 3 A schematic diagram of authentication for terminal device access according to an application embodiment is shown.

[0022] Description of reference numerals:

[0023] The first switch: S1;

[0024] Second switch: S2;

[0025] The third switch: S3;

[0026] The fourth switch: S4;

[0027] Security management server: 10;

[0028] Access database: 11;

[0029] PLC: 31;

[0030] HMI: 32;

[0031] IPC: 33;

[0032] I / O(1): 34;

[0033] I / O(2): 35;

[0034] I / O(3): 36;

[0035] I / O(4): 37;

[0036] External device PC2: 38;

[0037] Replacement of new equipment: 511;

[0038] Change the port to Port8:512;

[0039] Terminal device PC1: 39;

[0040] Access denied: 513;

[0041] Failures: 60 DETAILED DESCRIPTION

[0042] In order to have a clearer understanding of the technical features, purposes and effects of the embodiments of the present application, the specific implementation methods of the embodiments of the present application are now described with reference to the accompanying drawings.

[0043] In industrial production scenarios, there are a large number of devices and industrial control systems that need to transmit and exchange data. Switches can connect these devices through multiple ports and transmit data at high speed. However, in the existing technology, most on-site industrial access layer switches are unmanaged devices that do not support industrial security access mechanisms. Terminal devices are not restricted in access and can be connected to the network at will, which brings great security risks.

[0044] Based on the above problems, an embodiment of the present application provides a security access management system for terminal devices to at least partially solve the above technical problems.

[0045] The specific implementation of the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0046] like Figure 1As shown, the terminal device security access management system of the embodiment of the present application includes a security management server 10 and three switches, namely, a first switch S1, a second switch S2 and a third switch S3, wherein the first switch S1 is connected to the security management server 10, the second switch S2 is connected to the Port2 port of the first switch S1, and the third switch S3 is connected to the Port3 port of the first switch S1, and the second switch S2 and the third switch S3 are connected to the security management server 10 via the first switch S1. Each switch is connected to a number of terminal devices, which can be PLC, HMI, IPC, I / O device, PC, etc.

[0047] The security management server 10 is configured with an access database 11, which stores unique identification codes of terminal devices that are allowed to access. When a terminal device accesses a switch, the accessed switch sends a message requesting authentication to the security management server 10, and the message requesting authentication includes the unique identification code of the terminal device requesting access; the security management server 10 matches the received unique identification code with the unique identification code of the terminal device that is allowed to access stored in the access database 11, and if the match is successful, sends an authentication pass instruction to the switch; the switch responds to the authentication pass instruction to allow the terminal device to access.

[0048] like Figure 2 As shown, when the external device PC2 38 is connected to the Port4 port of the first switch S1, the first switch S1 sends a message requesting authentication to the security management server 10, and the message requesting authentication includes the unique identification code of the external device PC2 38. The security management server 10 matches the received unique identification code of PC2 with the unique identification code of the terminal device allowed to access stored in its access database 11. If the match is successful, that is, the access database 11 has a unique identification code that is exactly the same as the unique identification code of PC2, then the verification is successful, and the security server sends an authentication pass instruction to the first switch S1, and the first switch S1 responds to the instruction to allow PC2 to successfully access. If there is no unique identification code that is exactly the same as the unique identification code of PC2 in the access database 11, then the match fails, and the security server sends an instruction to deny access to the first switch.

[0049] The terminal device security access management system of the present application deploys a security management server as a whole, and uses the switch as a client of the security management server to perform access control of authorized terminal devices; the security management server has the management function of the access database, and the unique identification code of the terminal device that needs to be authorized to access the network is entered and managed in the database. When the terminal device is connected to the corresponding switch, the switch requests the security management server to perform authentication based on the unique identification code, and the security management server determines whether to allow access by searching the access database; when the unique identification code of the unauthorized terminal device is not in the access database of the security management server, the terminal device is denied access to the network;

[0050] The terminal equipment security access management system of the present application realizes the control of terminal equipment network access management and real-time monitoring of network access status. It performs access management based on the unique identification code of the terminal equipment, accurately defines the terminal equipment attributes and uniqueness, ensures the integrity of the control system and prevents illegal user intrusion; at the same time, the terminal equipment security access management system of the present application is not limited to the switch equipment deployed on site, and the replacement and replacement of the switch will not cause any configuration and modification impact.

[0051] Optionally, the access database 11 is a correspondence between the switch identification code and the unique identification code of the terminal device allowed to access; and the message requesting authentication includes the unique identification code of the terminal device requesting access and the identification code of the accessed switch.

[0052] Figure 1 In the security access management system of the terminal device shown, assume that the unique identification code of PLC = A, the unique identification code of HMI = B, the unique identification code of IPC = C, the unique identification code of I / O (one) = D, the unique identification code of I / O (two) = E, the unique identification code of I / O (three) = F, the unique identification code of I / O (four) = G, the identification code of the first switch is IP1, the identification code of the second switch is IP2, and the identification code of the third switch is IP3, then the access database 11 is as shown in Table 1.

[0053]

[0054]

[0055] Table 1

[0056] For the security of industrial control systems, each switch can only access terminal devices bound to the switch. Figure 3As shown, the access database 11 stores the correspondence between the unique identification code of the terminal device PC1 39 and the third switch S3. When the terminal device PC1 39 accesses the first switch S1, the message requesting authentication sent by the first switch S1 includes the unique identification code of the terminal device PC1 and the identification code of the first switch, which does not match the access database 11 in Table 1, so the terminal device PC1 cannot access.

[0057] When an access port of a switch fails, such as Figure 2 As shown, when the access port of the I / O (four) device (Port 7 of the third switch S3) fails, it is necessary to replace its access port to other ports of the third switch S3, such as Port 8. Since the access database 11 is the correspondence between the switch identification code and the unique identification code of the terminal device allowed to access, and is not the correspondence between a certain access port of the switch identification code and the unique identification code of the terminal device allowed to access, port replacement on the same switch will not change the above correspondence. There is no need to reconfigure the access database 11 of the security management server 10, nor is there any need to reconfigure the third switch S3, which reduces the workload and facilitates centralized management and monitoring.

[0058] Optionally, when replacing a switch, the identification code of the replaced switch is configured to be the same as the identification code of the replaced switch.

[0059] When a switch in use fails, it needs to be replaced. By configuring the identification code of the replacement switch to be the same as the identification code of the replaced switch, the correspondence between the switch identification code in the access database 11 and the unique identification code of the terminal device allowed access does not change, so there is no need to reconfigure the access database 11 of the security management server 10, which reduces the workload and facilitates centralized management and monitoring.

[0060] The terminal device security access management system of this implementation is not limited to the switch devices deployed on site, and the replacement and substitution of the switch does not cause any impact on the configuration and modification.

[0061] like Figure 2 As shown, when the second switch S2 fails, it is necessary to use the backup fourth switch S4 to replace it, and the identification code of the replaced fourth switch S4 is configured to be exactly the same as the failed switch. Therefore, the correspondence between the switch identification code in the access database 11 and the unique identification code of the terminal device allowed to access has not changed. There is no need to reconfigure the access database 11 of the security management server 10, and there is no need to bind and rebind the correspondence between the unique identification code of I / O (one) of the fourth switch S4 and Port2 and the correspondence between the unique identification code of I / O (two) and Port3.

[0062] Optionally, the switch identification code is a switch name and / or a switch IP address.

[0063] Optionally, the unique identification code is the MAC address of the terminal device.

[0064] Optionally, the switch is an industrial access layer switch.

[0065] Optionally, the industrial control system is a PLC control system or a DCS control system.

[0066] Nouns and pronouns relating to persons in this patent application are not limited to a specific gender.

[0067] The above is only an illustrative specific implementation of the embodiment of the present application, and is not intended to limit the scope of the embodiment of the present application. Any equivalent changes, modifications and combinations made by any technician in this field without departing from the concept and principle of the embodiment of the present application should fall within the scope of protection of the embodiment of the present application.

Claims

1. A terminal device security access management system for industrial control systems, characterized in that: The terminal device security access management system comprises a security management server (10) and a switch connected to the security management server (10), wherein: The switch is used to access the terminal equipment; The security management server (10) is configured with an access database (11), and the access database (11) stores unique identification codes of terminal devices that are allowed to access; When a terminal device accesses a switch, the accessed switch sends a message requesting authentication to a security management server (10), wherein the message requesting authentication includes a unique identification code of the terminal device requesting access; the security management server (10) matches the received unique identification code with the unique identification code of the terminal device allowed to access stored in the access database (11), and if the match is successful, sends an authentication success instruction to the switch; the switch responds to the authentication success instruction to allow the terminal device to access.

2. The terminal device security access management system according to claim 1, characterized in that: The access database (11) is a correspondence between the switch identification code and the unique identification code of the terminal device allowed to access; and The message requesting authentication includes the unique identification code of the terminal device requesting access and the identification code of the switch to be accessed.

3. The terminal device security access management system according to claim 2, characterized in that: When replacing a switch, configure the identification code of the replacement switch to be the same as the identification code of the replaced switch.

4. The terminal device security access management system according to claim 3, characterized in that: The switch identification code is a switch name and / or a switch IP address.

5. The terminal device security access management system according to claim 4, characterized in that: The unique identification code of the terminal device is the MAC address of the terminal device.

6. The terminal device security access management system according to claim 5, characterized in that: One switch is directly connected to the security server, and the other switches are connected to the security server via the switch directly connected to the security server.

7. The terminal device security access management system according to claim 6, characterized in that: The switch is an industrial access layer switch.

8. The terminal device security access management system according to any one of claims 1 to 7, characterized in that: The industrial control system is a PLC control system or a DCS control system.

Images