Safety data acquisition gateway based on USB interface isolation
By using USB interface isolation technology in the digital gateway to replace TCP/IP communication, the existing digital gateway is solved and the problem of vulnerability to virus attacks in TCP/IP communication is significantly improved.
Patent Information
- Application Number
- CN202422036162.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-21
- Publication Date
- 2025-06-24
- Estimated Expiration
- 2034-08-21
AI Technical Summary
When using TCP/IP communication, existing digital gateways are vulnerable to virus attacks, increasing the security risks of controlling networks and MES systems.
The isolation solution based on USB interface is adopted, and the upper motherboard and the lower motherboard are connected through the USB interface through the isolation card, replacing the traditional TCP/IP communication, and isolation between the sending and receiving ends is achieved.
It significantly improves the security of the digital gateway, prevents virus attacks and interference, and enhances the system's protection capabilities.
Smart Images
Figure CN223024432U_ABST
Abstract
Description
Technical Field
[0001] The utility model relates to the field of communications, and more specifically, to a secure data acquisition gateway based on USB interface isolation. Background Art
[0002] The development of industrialization and informatization has realized the close integration of traditional computer networks and industrial control networks. More and more enterprise management information systems, such as the manufacturing execution system (MES) in typical process industries like petroleum and chemical industries, use various data interaction devices to collect real-time data from control systems, and then complete optimization control. Especially with the gradual and in-depth application of new technologies such as the Internet of Things and big data, the connection between the management network and the industrial control network has become increasingly close, expanding the access scope of the industrial control network, but at the same time increasing security risks.
[0003] In order to collect production data of the control system into the MES, existing data acquisition gateways generally use Windows or Linux operating systems and communicate with the control system or MES system using TCP / IP communication technology similar to that of the industrial control network or the management network. Viruses can attack the control network or MES system by taking advantage of operating system vulnerabilities or TCP / IP communication vulnerabilities. Content of the Utility Model
[0004] In view of the above problems, the utility model discloses a secure data acquisition gateway based on USB interface isolation, which uses a USB interface to replace TCP / IP communication to achieve isolation between the sending end and the receiving end. The utility model is realized through the following technical solutions:
[0005] A secure data acquisition gateway based on USB interface isolation and an encrypted and balanced communication method, including an upper main board, an isolation card, and a lower main board. Among them: one end of the lower main board communicates bidirectionally with m terminals of the control system through TCP / IP, and one end of the upper main board communicates bidirectionally with n terminals of the MES system through TCP / IP, where m and n are natural numbers determined according to the actual industrial environment.
[0006] The isolation card is connected to the upper main board and the lower main board through a USB interface, and can be regarded as a read-only large-capacity storage device for the lower main board and the upper main board.
[0007] The lower main board uses a general computer main board based on x86 or ARM, and reads and writes the isolation card by calling the isolation board API function through the USB interface, and its TCP / IP is connected to an external DCS system.
[0008] The upper main board uses a general computer main board based on x86 or ARM, and reads and writes the isolation card through the USB interface by using the method of calling the isolation board API function, and its TCP / IP is connected to an external MES system.
[0009] The upper main board and the lower main board are preferably SV1-F2026C from Xinbu Technology, and the isolation card is preferably Kshd-OT005 from Kaiston.
[0010] Advantageous effects
[0011] For a secure data acquisition gateway based on USB interface isolation of the present utility model, a USB interface is used to replace TCP / IP communication to achieve isolation between the sending end and the receiving end, with strong anti-interference and anti-virus capabilities, significantly enhancing the security of the present utility model. Description of the drawings
[0012] Figure 1 It is a schematic diagram of the framework structure of a secure data acquisition gateway based on USB interface isolation of the present utility model; Detailed implementation manners
[0013] Next, the technical solutions in the embodiments of the present utility model will be further described in conjunction with the drawings in the embodiments of the present utility model:
[0014] As Figure 1 shown, a secure data acquisition gateway based on USB interface isolation includes an upper main board, an isolation card, and a lower main board, where: one end of the lower main board communicates bidirectionally with m terminals of the control system through TCP / IP, and one end of the upper main board communicates bidirectionally with n terminals of the MES system through TCP / IP, and m and n are natural numbers determined according to the actual industrial environment.
[0015] The isolation card is connected to the upper main board and the lower main board through a USB interface, and can be regarded as a read-only large-capacity storage device for the lower main board and the upper main board.
[0016] The lower main board uses a general computer main board based on x86 or ARM, and reads and writes the isolation card by calling the isolation board API function through the USB interface, and its TCP / IP is connected to the external DCS system.
[0017] The upper main board uses a general computer main board based on x86 or ARM, and reads and writes the isolation card through the USB interface by calling the isolation board API function, and its TCP / IP is connected to the external MES system.
[0018] The upper main board and the lower main board are preferably SV1-F2026C from Xinbu Technology, and the isolation card is preferably Kshd-OT005 from Kaiston.
[0019] For a secure data acquisition gateway based on USB interface isolation proposed by the present utility model, a USB interface is used to replace TCP / IP communication to achieve isolation between the sending end and the receiving end, with strong anti-interference and anti-virus capabilities, significantly enhancing the security of the present utility model.
[0020] Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing relevant hardware through circuit settings. This circuit setting can be completed by a single-chip microcomputer or other integrated chips with similar functions, which is the prior art. The core innovation point of the present utility model lies in the overall structural layout of the system. The local control method can be completed through programming of the prior art; the local module connection can be realized through the prior art. Specifically in this application, the core innovation point is that the isolation card is connected to the upper main board and the lower main board through the USB interface, and the USB interface is used to replace TCP / IP communication to achieve isolation between the sending end and the receiving end, with strong anti-interference and anti-virus capabilities, significantly improving security. In addition, using the USB interface to call the API function of the isolation board to read and write the isolation card, and using the method of calling the API function of the isolation board to read and write the isolation card through the USB interface, etc. all belong to the prior art and should not be regarded as a limitation to the protection object of the present utility model.
Claims
1. A secure data acquisition gateway based on USB interface isolation, characterized in that It includes an upper mainboard, an isolation card and a lower mainboard, wherein: the isolation card is connected to the upper mainboard and the lower mainboard through a USB interface; one end of the lower mainboard communicates bidirectionally with m terminals of the control system through TCP / IP, and one end of the upper mainboard communicates bidirectionally with n terminals of the MES system through TCP / IP, and m and n are natural numbers determined according to the actual industrial environment.
2. According to claim 1, a secure data acquisition gateway based on USB interface isolation is characterized in that The lower mainboard uses a general x86 or ARM-based computer mainboard, and its TCP / IP is connected with an external DCS system.
3. According to the secure data acquisition gateway based on USB interface isolation of claim 1, it is characterized in that The upper mainboard uses a general x86 or ARM-based computer mainboard, and its TCP / IP is connected to the external MES system.
4. According to claim 1, a secure data acquisition gateway based on USB interface isolation is characterized in that The models of the upper mainboard and the lower mainboard are SV1-F2026C of Xinbu Technology, and the model of the isolation card is Kshd-OT005 of Keston.