Numerical control system

Abstract

The utility model discloses a numerical control system which comprises an industrial host used for operation of numerical control software and processing, storage and / or transmission of processing data; a trusted module and / or an encryption module are / is embedded in the industrial host; the credible module is used for ensuring credible starting and / or credible operation of the numerical control system; and the encryption module is used for carrying out encryption processing on the stored and / or transmitted processing data so as to ensure the security of the data. According to the method, the trusted module and / or the encryption module are / is embedded in the industrial host at least, safety protection is carried out on the numerical control system, and therefore the information safety and protection capacity of the numerical control system are improved.

Description

Technical Field

[0001] This application relates to the field of CNC machine tool technology, and more specifically, to a CNC system. Background Technology

[0002] CNC machine tools, as the "mother machines" of the manufacturing industry, are the equipment of manufacturing equipment. The CNC system is the brain of the machine tool, and its significance to the manufacturing industry is no less than that of chips to the electronics industry.

[0003] However, at present, my country's security and reliability protection system for CNC systems is not yet sound. Once an information security incident occurs in the machine tool control system, it will have serious consequences for the manufacturing and production operations of enterprises and the country, and may even threaten my country's national economy and national defense security. Utility Model Content

[0004] In response to at least one deficiency or improvement requirement of the prior art, this application provides a numerical control system for enhancing the information security and protection capabilities of the numerical control system.

[0005] To achieve the above objectives, this application provides a numerical control system, comprising:

[0006] An industrial host computer is used to run CNC software and process, store, and / or transmit machining data; the industrial host computer has a built-in trusted module and / or encryption module.

[0007] The trusted module is used to ensure the trusted startup and / or trusted operation of the CNC system;

[0008] The encryption module is used to encrypt the processed data stored and / or transmitted to ensure data security.

[0009] Furthermore, it also includes:

[0010] A bus-type intelligent module is a bus component with data transmission and independent data processing capabilities, which is connected to the industrial host via a bus.

[0011] The bus-type intelligent module has the trusted module and / or the encryption module embedded within it.

[0012] Furthermore, it also includes:

[0013] A gateway-type intelligent module is used for data communication between the industrial host and the cloud, and it is connected to the industrial host via wired and / or wireless means.

[0014] The gateway-type intelligent module has the trusted module and / or the encryption module embedded within it.

[0015] Furthermore, it also includes:

[0016] The MCP button is connected to the industrial host via a bus and is used for human-machine interaction.

[0017] Furthermore, it also includes:

[0018] The I / O board is connected to the industrial host via a bus and is used for machine tool processing.

[0019] Furthermore, it also includes:

[0020] The servo drive, connected to the industrial host via a bus, is used for motor driving.

[0021] In summary, compared with the prior art, the above-described technical solutions conceived in this application can achieve the following beneficial effects:

[0022] (1) This application provides security protection for the CNC system by embedding trusted modules and / or encryption modules in the industrial host, thereby improving the information security and protection capabilities of the CNC system.

[0023] (2) The industrial host, bus-type intelligent module and gateway-type intelligent module in the CNC system are the weak points that make the CNC system most vulnerable to information security incidents. Therefore, this application embeds a trusted module and an encryption module into the industrial host, bus-type intelligent module and gateway-type intelligent module to ensure the security and trustworthiness of these three weak points, thereby improving the information protection capability of the CNC system. Attached Figure Description

[0024] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 This is a schematic diagram of the core structure of a numerical control system provided in an embodiment of this application;

[0026] Figure 2 A detailed structural diagram of a numerical control system provided in this application embodiment;

[0027] Figure 3 This application provides a connection diagram for the bus-type intelligent module in the embodiments of this application.

[0028] Figure 4 This is a connection diagram for the application scenario of the gateway-type smart module provided in the embodiments of this application. Detailed Implementation

[0029] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application. Furthermore, the technical features involved in the various embodiments described below can be combined with each other as long as they do not conflict with each other.

[0030] The terms "comprising" or "having," and any variations thereof, in the specification, claims, or drawings of this application are intended to cover a non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the steps or units listed, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to such processes, methods, products, or apparatus.

[0031] As described in the background section of this specification, the current security and reliability protection system for CNC systems in my country is still incomplete. Therefore, this application proposes a CNC system to enhance the information security and protection capabilities of CNC systems.

[0032] The industrial host, bus-type intelligent module, and gateway-type intelligent module in a CNC system are closely related to machining data storage and transmission. Therefore, these three parts are the weak points most prone to information security incidents in CNC systems. The overall technical approach of this application is to embed trusted and encrypted modules into the industrial host, bus-type intelligent module, and gateway-type intelligent module, thereby ensuring the security and trustworthiness of these three weak points and improving the information protection capabilities of the CNC system.

[0033] refer to Figure 1 One embodiment of this application provides a secure and reliable open CNC system, which includes at least an industrial host. The industrial host can be an industrial host with a processor based on architectures such as x86 or ARM, and is used for running CNC software, processing, storing, and transmitting machining data.

[0034] Embedding trusted modules and / or encryption modules into the industrial host computer constitutes a secure and reliable open CNC system. The trusted module ensures both reliable system startup and reliable system operation. The encryption module encrypts stored and transmitted data, thereby guaranteeing data security.

[0035] In some embodiments, more specifically, the trusted module of the CNC system is selected from the TPCM3310S module of Trusted Huatai (Beijing Trusted Huatai Information Technology Co., Ltd.), and the encryption module is selected from the PCIE encryption module of Shenyang Institute of Automation.

[0036] The industrial host selected is the Huazhong CNC HPC-220 (processor KX-6000G). The HPC-220 hardware was adjusted, and an encryption interface was added by embedding a trusted Huatai TPCM3310S module and a Shenyang Institute of Automation (SIA) PCIE encryption module. The TPCM3310S module ensures the trusted boot and operation of the HPC-220, while the SIA PCIE encryption module ensures data security during data processing.

[0037] This application provides security protection for the CNC system by embedding trusted modules and / or encryption modules within the industrial host, thereby enhancing the information security and protection capabilities of the CNC system.

[0038] In some embodiments, preferably, the CNC system further includes a bus-type intelligent module. The bus-type intelligent module is a bus component with data transmission and independent data processing capabilities, connected to the CNC system via a bus, as shown in the reference [reference]. Figure 2 The bus-type intelligent module embeds the trusted module and / or the encryption module.

[0039] Figure 3 The diagram illustrates an application scenario for a bus-type intelligent module. The CNC system utilizes an HPC-200 industrial PC (E3815 processor) from Huazhong CNC Corporation. This module processes real-time signals such as video, temperature, vibration, and displacement, then transmits the results to the industrial host via the bus. This significantly reduces the data processing load on the industrial host and improves machining efficiency. The HPC-200 hardware was adjusted, and an encryption interface was added by embedding a TPCM3310S module and a PCIE encryption module from Shenyang Automation Institute. The TPCM3310S module ensures the trusted startup and operation of the HPC-200, while the PCIE encryption module from Shenyang Automation Institute ensures data security during the HPC-200's data processing.

[0040] In some embodiments, preferably, the CNC system further includes a gateway-type intelligent module. The gateway-type intelligent module is used in networked CNC system applications, primarily responsible for data communication between the industrial host and the cloud. The industrial host and the gateway-type intelligent module can be connected via wired or wireless means. Preferably, the gateway-type intelligent module is a processor module capable of supporting both wired and wireless networking. The gateway-type intelligent module embeds the trusted module and / or the encryption module.

[0041] Figure 4The diagram illustrates an application scenario for a gateway-type intelligent module. The gateway-type intelligent module uses a cryptographic machine from Jiangnan Tianan (Beijing Jiangnan Tianan Technology Co., Ltd.) as the gateway-type intelligent module for this system. This module can authenticate and control access to connected devices, encrypt and protect the integrity of data transmission, thereby ensuring the security and reliability of data transmission in the CNC system.

[0042] In some embodiments, preferably, the CNC system may further include other bus modules. These other bus modules include devices such as MCP buttons, I / O boards, and servo drives, corresponding to functions such as human-machine interaction, machine tool processing, and motor drive, respectively.

[0043] This application introduces trusted and encrypted technologies into the existing architecture of CNC systems (including open CNC systems and traditional non-open CNC systems) to construct a secure and reliable CNC system architecture. Starting from practical application scenarios such as offline machining, production line operation, intranet operation, and internet-based operation, and combining practical application needs such as precision machining and remote maintenance, it clarifies the security defense boundaries of the CNC system in each scenario and establishes a trusted transmission chain for CNC equipment adapted to different scenarios.

[0044] This application modifies the hardware of the industrial host, bus-type intelligent module, and gateway-type intelligent module of the CNC system and adds encryption interfaces, thereby realizing the embedding of trusted modules and encryption modules. The embedded trusted module enables trusted startup and trusted operation of the CNC system compliant with the Trusted 3.0 standard; the embedded encryption module utilizes encryption technology to achieve data storage and transmission security functions for the CNC system. This significantly improves the security and reliability of existing CNC systems, generating substantial economic and even social benefits for enterprises and the nation's manufacturing operations.

[0045] Those skilled in the art will understand that the technical features described in the various embodiments and / or claims of this application can be combined and / or combined in various ways, even if such combinations or combinations are not explicitly described in this application. In particular, without departing from the spirit and teachings of this application, the technical features described in the various embodiments and / or claims of this application can be combined and / or combined in various ways, and all such combinations and / or combinations fall within the scope of this application.

[0046] Although this application has been shown and described with reference to specific exemplary embodiments thereof, those skilled in the art will understand that various changes in form and detail may be made to this application without departing from the spirit and scope of the application as defined by the appended claims and their equivalents. Therefore, the scope of this application should not be limited to the above embodiments, but should be determined not only by the appended claims, but also by their equivalents.

Claims

1. A numerical control system characterized by comprising: Comprise: An industrial host for running numerical control software, processing, storing and / or transmitting machining data; the industrial host is embedded with a trusted module and / or an encryption module; The trusted module is used to ensure the trusted start and / or trusted operation of the numerical control system; The encryption module is used to encrypt the machining data for storage and / or transmission to ensure the security of the data.

2. The numerical control system of claim 1, wherein, Further comprise: A bus-type intelligent module, a bus component with data transmission and independent data processing capability, which is connected with the industrial host through a bus; The bus-type intelligent module is embedded with the trusted module and / or the encryption module.

3. The numerical control system according to claim 1 or 2, characterized in that, Further comprise: A gateway-type intelligent module for data communication between the industrial host and the cloud, which is connected with the industrial host through wired and / or wireless means; The gateway-type intelligent module is embedded with the trusted module and / or the encryption module.

4. The numerical control system according to claim 1 or 2, characterized by Further comprise: An MCP button connected with the industrial host through a bus for human-computer interaction.

5. The numerical control system according to claim 1 or 2, characterized by Further comprise: An IO board card connected with the industrial host through a bus for machine tool machining.

6. The numerical control system according to claim 1 or 2, characterized by Further comprise: A servo drive connected with the industrial host through a bus for motor driving.

Images