New Industrial Network Architecture

Abstract

The embodiment of the present application provides a new type of industrial network architecture. The new type of industrial network architecture includes a first system and several switch network layers connected in sequence; the first system includes several device nodes, each of which is connected to one of the several switch network layers through at least one type of bus; two device nodes in the first system that interact via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to realize OSI layer 2 communication between the two, and two device nodes that interact via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to realize OSI layer 3 communication between the two. The embodiment of the present application meets the needs of a one-stop digital factory network and has the characteristics of secure isolation.

Description

Technical Field

[0001] The present disclosure relates to the technical field of network structure and centralized management, and in particular to a new type of industrial network architecture. Background Art

[0002] like Figure 1 As shown in the figure, in the traditional DCS network architecture, the operator station nodes connected to the industrial Ethernet, such as the control system, are connected to the engineer station nodes and the server nodes through the terminal bus, the engineer station nodes, the server nodes and the controller nodes are connected through the system bus, and the controller nodes and the I / O card nodes are connected through the control bus. In this connection mode, the buses are independent of each other. On the one hand, the data interaction between the various levels needs to be carried out through the application layer, and the real-time nature of the data and the convenience of interconnection are difficult to guarantee, which is difficult to meet the needs of the digital factory network. On the other hand, each node in the system needs to be managed separately, which is not conducive to the centralized management of each node. Summary of the invention

[0003] In view of this, the present disclosure provides a new industrial network architecture for at least partially solving the above technical problems.

[0004] In a first aspect, the present disclosure provides a new industrial network architecture, including:

[0005] Several switch network layers connected in sequence;

[0006] A first system, wherein the first system includes a plurality of device nodes, wherein each device node is connected to one of the plurality of switch network layers through at least one type of bus; in the first system, two device nodes interacting via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to realize OSI layer 2 communication between the two device nodes, and two device nodes interacting via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to realize OSI layer 3 communication between the two device nodes.

[0007] In a possible implementation, the plurality of switch network layers include at least one layer 2 switch network layer and / or at least one layer 3 switch network layer.

[0008] In a possible implementation, the novel industrial network architecture also includes a second system; the second system includes a plurality of device nodes, wherein each device node is connected to one of the plurality of switch network layers through at least one type of bus; two device nodes in the second system that interact via the same type of bus are assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two, and two device nodes that interact via different types of buses are assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two.

[0009] In a possible implementation manner, the device nodes in the first system and the device nodes in the second system are respectively assigned different VLAN numbers by the network layer of the switches to which they are connected to implement OSI layer 3 communication between the two.

[0010] In a possible implementation, the new industrial network architecture also includes a centralized management platform, which is connected to one of the several switch network layers to manage each device node in each system. The VLAN number assigned to the centralized management platform by the switch of the switch network layer to which it is connected is different from the VLAN number assigned to the device nodes in all systems by the switches of the switch network to which they are connected.

[0011] In a second aspect, the present disclosure provides a new industrial network architecture, the new industrial network architecture comprising:

[0012] A first layer 2 switch network layer, a second layer 2 switch network layer, and a layer 3 switch network layer connected in sequence;

[0013] The first system includes one or more of a server node, an engineer station node, an operator station node, a controller node, and an I / O card node; the server node accesses the three-layer switch network layer through a terminal bus and a system bus respectively, the engineer station node accesses the first two-layer switch network layer through a terminal bus and a system bus respectively, the operator station node accesses the first two-layer switch network layer through a terminal bus, the controller node accesses the first two-layer switch network layer through a system bus and a control bus respectively, and the I / O card node accesses the first two-layer switch network layer through a control bus; in the first system, two nodes interacting via the same type of bus are respectively assigned the same Vlan number by the switch of the switch network layer to which they are connected to realize OSI two-layer communication between the two nodes, and two nodes interacting via different types of buses are respectively assigned different Vlan numbers by the switch of the switch network layer to which they are connected to realize OSI three-layer communication between the two nodes.

[0014] In a possible implementation, the new industrial network architecture also includes a second system, which includes one or more of the server node, the engineer station node, the operator station node, the controller node, and the I / O card node; two nodes in the second system that interact via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two nodes, and two nodes that interact via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two nodes, and the nodes in the first system and the nodes in the second system are respectively assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two nodes.

[0015] In one possible implementation, the new industrial network architecture also includes a centralized management platform, which is connected to the three-layer switch network layer for managing each node in all systems. The VLAN number assigned by the switch of the switch network layer to which the centralized management platform is connected is different from the VLAN number assigned by the switch of the switch network layer to which each node in all systems is connected.

[0016] In a possible implementation, the OSI layer 3 communication between nodes implements access restriction through an access control list configured in a layer 3 switch or router connected between the nodes.

[0017] In a possible implementation, a firewall is provided between the second layer 2 switch network layer and the layer 3 switch network layer;

[0018] The novel industrial network architecture also includes a first local area network and a second local area network. The first local area network includes the first system and the first layer 2 switch network layer, the second layer 2 switch network layer and the layer 3 switch network layer connected in sequence. The second local area network is connected to the layer 3 switch network layer, and a firewall is arranged between the second local area network and the layer 3 switch network layer.

[0019] In an embodiment of the present application, the industrial network is divided into several switch network layers, and VLAN technology is used to connect each device node in the control system to the corresponding switch network layer through the corresponding type of bus. At the same time, two device nodes in the same system that interact via the same type of bus are assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two, and two device nodes that interact via different types of buses are assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two. Device nodes in different systems are assigned different VLAN numbers by the connected switch network layer to achieve OSI layer 3 communication between the two, which meets the needs of a one-network digital factory network and has the characteristics of security isolation. Further, a centralized management platform is connected to a switch network layer to manage each device node in each system, which is convenient for centralized management. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 A structural diagram of a traditional DCS network architecture is shown.

[0021] Figure 2 It is a structural diagram of a new industrial network architecture according to an embodiment of the present disclosure.

[0022] List of reference numerals:

[0023] 102: Operator station node; 104: Engineer station node;

[0024] 106: server node; 108: controller node;

[0025] 110: IO card node; 112: terminal bus;

[0026] 114: system bus; 116: control bus;

[0027] 118: Centralized management platform; 200: First local area network;

[0028] 210: first layer 2 switch network layer; 220: second layer 2 switch network layer;

[0029] 230: Layer 3 switch network layer; 240: First system;

[0030] 250: Second system; 300: Second LAN. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical scheme, and advantages of the present application more clearly understood, the present application is further described in detail with reference to the accompanying drawings and embodiments. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other technical schemes obtained by ordinary technicians in the field belong to the scope of protection of the present application.

[0032] The present disclosure relates to an industrial network architecture of an embodiment, which includes a first system and a plurality of switch network layers connected in sequence.

[0033] The plurality of switch network layers preferably include at least one layer 2 switch network layer and / or at least one layer 3 switch network layer. Optionally, the plurality of switch network layers include one layer 2 switch network layer and one layer 3 switch network layer; optionally, the plurality of switch network layers include two layer 2 switch network layers and one layer 3 switch network layer; and so on. For example, Figure 2 As shown, several switch network layers may include a first layer 2 switch network layer 210 (i.e., access layer, mainly supporting ring network functions, Vlan functions, etc.), a second layer 2 switch network layer 220 (i.e., aggregation layer, mainly supporting ring network functions, Vlan functions, etc.) and a layer 3 switch network layer 230 (i.e., core layer, mainly supporting ring network functions, Vlan functions, routing functions, ACL security functions, etc.).

[0034] The first system includes a plurality of device nodes, each of which is connected to one of a plurality of switch network layers through at least one type of bus. Optionally, the first system may include one or more of a server node, an engineer station node, an operator station node, a controller node, and an I / O card node. For example, Figure 2 As shown, the first system 240 includes a server node 106, an engineer station node 104, an operator station node 102, a controller node 108, and an I / O card node 110. And illustratively, as Figure 2 As shown, the server node 106 is connected to the three-layer switch network layer 230 through the terminal bus 112 and the system bus 114 respectively, the engineer station node 104 is connected to the first and second layer switch network layers 210 through the terminal bus 112 and the system bus 114 respectively, the operator station node 102 is connected to the first and second layer switch network layers 210 through the terminal bus 112, the controller node 108 is connected to the first and second layer switch network layers 210 through the system bus 114 and the control bus 116 respectively, and the I / O card node 110 is connected to the first and second layer switch network layers 210 through the control bus 116.

[0035] Furthermore, in this embodiment, two device nodes in the first system that interact via the same type of bus are respectively assigned the same VLAN number by the switches of the connected switch network layer to realize OSI layer 2 communication between the two, and two device nodes that interact via different types of buses are respectively assigned different VLAN numbers by the switches of the connected switch network layer to realize OSI layer 3 communication between the two. Figure 2 Taking the server node 104 and the controller node 108 as an example, the server node 106 and the controller node 108 interacting via the same type of system bus 114 are respectively assigned the same VLAN number by the switch of the connected switch network layer to realize OSI layer 2 communication between the two, and the two device nodes interacting via different types of terminal buses 112 and control buses 116 are respectively assigned different VLAN numbers by the switch of the connected switch network layer to realize OSI layer 3 communication between the two. In this way, the industrial network is divided into several switch network layers, and the VLAN technology is used to connect each device node in the control system to the corresponding switch network layer through the corresponding type of bus, so as to meet the needs of the digital factory network to be one network to the end, facilitate centralized management, and have the characteristics of security isolation.

[0036] Optionally, the industrial network architecture also includes a second system; the second system includes several device nodes, each of which is connected to one of several switch network layers through at least one type of bus. The second system may include one or more of a server node, an engineer station node, an operator station node, a controller node, and an I / O card node. The server node is connected to the three-layer switch network layer through a terminal bus and a system bus, respectively. The engineer station node is connected to the first and second layer switch network layers through a terminal bus and a system bus, respectively. The operator station node is connected to the first and second layer switch network layers through a terminal bus, and the controller node is connected to the first and second layer switch network layers through a system bus and a control bus, respectively. The I / O card node is connected to the first and second layer switch network layers through a control bus. It can be understood that the first system and the second system can be the same or different. In addition, similar to the first system 240, in the second system 250, two device nodes interacting via the same type of bus are assigned the same VLAN number by the switch of the connected switch network layer to realize OSI layer 2 communication between the two, and two device nodes interacting via different types of buses are assigned different VLAN numbers by the switch of the connected switch network layer to realize OSI layer 3 communication between the two. For example, Figure 2As shown, the second system 250 includes a server node 106 and an operator station node 102. The server node 106 is connected to the three-layer switch network layer 230 through the terminal bus 112 and the system bus 114 respectively, and the operator station node 102 is connected to the first two-layer switch network layer 210 through the terminal bus 112; and the server node 106 and the operator station node 102 that interact through the same type of terminal bus 112 are assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI two-layer communication between the two, and the server node 106 and the operator station node 102 that interact through different types of terminal buses 112 and system buses 114 are assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI three-layer communication between the two.

[0037] It can be understood that although the above only describes an optional solution of an industrial network architecture including one system (first system) and two systems (first and second systems), the present disclosure is not limited thereto, and the industrial network architecture of the present disclosure can also include more systems such as a third system, ..., an Nth system, N is a positive integer greater than 2, and each system can include a number of device nodes and each device node is connected to one of a number of switch network layers through at least one type of bus. It can be understood that the N systems from the first to the Nth system in this embodiment can be different, completely different, or partially the same.

[0038] Optionally, in this embodiment, two device nodes in different systems are respectively assigned different VLAN numbers by the network layer of the switch to which they are connected to realize OSI layer 3 communication between the two. Figure 2 As shown, the server node 106 in the first system 240 and the operator station node 102 in the second system 250 are respectively assigned different VLAN numbers by the network layer of the switch to which they are connected to realize OSI layer 3 communication between the two.

[0039] In addition, the aforementioned OSI layer 3 communication between the nodes is access restricted by an access control list configured in a layer 3 switch or router connected between the nodes, further ensuring the characteristics of secure isolation.

[0040] Optionally, the industrial network architecture may further include a centralized management platform, which is connected to one of the switch network layers to manage the device nodes in each system, and the VLAN number assigned to the centralized management platform by the switch of the switch network layer to which it is connected is different from the VLAN number assigned to the device nodes in all systems by the switches of the switch network to which they are connected. For example, Figure 2As shown, the centralized management platform 118 is preferably connected to the three-layer switch network layer 230, and the VLAN number assigned to the centralized management platform 118 by the switch of the connected switch network layer is different from the VLAN number assigned to any node in the first and second systems by the switch of the connected switch network.

[0041] Optionally, a firewall is provided between the second layer 2 switch network layer and the layer 3 switch network layer; and the industrial network architecture further includes a first local area network and a second local area network, and the first local area network includes the industrial network architecture of any of the aforementioned implementations. Figure 2 As shown, the second local area network 300 is connected to the three-layer switch network layer 230, and a firewall is set between the second local area network 300 and the three-layer switch network layer 230. The reasonable setting of these firewalls makes the industrial network architecture safe and isolated.

[0042] In addition, it should be pointed out that in this disclosure Figure 2 The number and type of the first system 240 and the second system 250, and the number and type of switch network layers shown are exemplary and cannot be used to limit the scope of protection of the present disclosure.

[0043] It should be noted that in the claims and description of this patent, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "including one" do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0044] Obviously, those skilled in the art should understand that the modules or steps of the above-mentioned embodiments of this specification can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, and optionally, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. In this way, the embodiments of this specification are not limited to any specific combination of hardware and software.

[0045] While the present disclosure has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present disclosure.

[0046] The present disclosure has been shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present disclosure is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art can know that the code review methods in the above different embodiments can be combined to obtain more embodiments of the present disclosure, and these embodiments are also within the protection scope of the present disclosure.

Claims

1. A new industrial network architecture, characterized in that: The industrial network architecture includes: Several switch network layers connected in sequence; A first system, wherein the first system includes a plurality of device nodes, wherein each device node is connected to one of the plurality of switch network layers through at least one type of bus; in the first system, two device nodes interacting via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to realize OSI layer 2 communication between the two device nodes, and two device nodes interacting via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to realize OSI layer 3 communication between the two device nodes.

2. The new industrial network architecture according to claim 1 is characterized in that: The plurality of switch network layers include at least one layer 2 switch network layer and / or at least one layer 3 switch network layer.

3. The new industrial network architecture according to claim 1 is characterized in that: The industrial network architecture also includes a second system; the second system includes a plurality of device nodes, wherein each device node is connected to one of the plurality of switch network layers through at least one type of bus; two device nodes in the second system that interact via the same type of bus are assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two, and two device nodes that interact via different types of buses are assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two.

4. The new industrial network architecture according to claim 3 is characterized in that: The device nodes in the first system and the device nodes in the second system are respectively assigned different Vlan numbers by the network layer of the switches to which they are connected so as to realize OSI layer 3 communication between the two.

5. The novel industrial network architecture according to any one of claims 1 to 4, characterized in that: The industrial network architecture also includes a centralized management platform, which is connected to one of the several switch network layers to manage each device node in each system. The VLAN number assigned to the centralized management platform by the switch of the switch network layer to which it is connected is different from the VLAN number assigned to the device nodes in all systems by the switches of the switch network to which they are connected.

6. A new industrial network architecture, characterized in that: The industrial network architecture includes: A first layer 2 switch network layer (210), a second layer 2 switch network layer (220) and a layer 3 switch network layer (230) connected in sequence; A first system (240), the first system (240) includes one or more of a server node (106), an engineer station node (104), an operator station node (102), a controller node (108), and an I / O card node; the server node (106) is connected to the three-layer switch network layer (230) through a terminal bus (112) and a system bus (114), the engineer station node (104) is connected to the first two-layer switch network layer (210) through a terminal bus (112) and a system bus (114), and the operator station node (102) is connected to the first two-layer switch network layer through a terminal bus (112). (210), the controller node (108) is connected to the first layer 2 switch network layer (210) through the system bus (114) and the control bus (116), and the I / O card node is connected to the first layer 2 switch network layer (210) through the control bus (116); two nodes in the first system (240) that interact via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two nodes, and two nodes that interact via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two nodes.

7. The new industrial network architecture according to claim 6 is characterized in that: The industrial network architecture also includes a second system (250), the second system (250) includes one or more of the server node (106), the engineer station node (104), the operator station node (102), the controller node (108), and the I / O card node; two nodes in the second system (250) that interact via the same type of bus are respectively assigned the same VLAN number by the switch of the connected switch network layer to achieve OSI layer 2 communication between the two nodes, and two nodes that interact via different types of buses are respectively assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two nodes, and nodes in the first system (240) and nodes in the second system (250) are respectively assigned different VLAN numbers by the switch of the connected switch network layer to achieve OSI layer 3 communication between the two nodes.

8. The novel industrial network architecture according to claim 6 or 7, characterized in that: The industrial network architecture also includes a centralized management platform (118), which is connected to the three-layer switch network layer (230) for managing each node in all systems. The VLAN number assigned by the switch of the switch network layer to which the centralized management platform (118) is connected is different from the VLAN number assigned by the switch of the switch network layer to which each node in all systems is connected.

9. The new industrial network architecture according to claim 8 is characterized in that: The OSI layer 3 communication between nodes implements restricted access through an access control list configured in a layer 3 switch or router connected between the nodes.

10. The new industrial network architecture according to claim 9, characterized in that: A firewall is provided between the second layer 2 switch network layer (220) and the layer 3 switch network layer (230); The industrial network architecture also includes a first local area network (200) and a second local area network (300), wherein the first local area network (200) includes the first system (240) and the first two-layer switch network layer (210), the second two-layer switch network layer (220) and the three-layer switch network layer (230) connected in sequence; the second local area network (300) is connected to the three-layer switch network layer (230), and a firewall is arranged between the second local area network (300) and the three-layer switch network layer (230).

Images