Industrial control data acquisition and forwarding system

Abstract

The utility model provides an industrial control data acquisition and forwarding system, which acquires data in real time in industrial production through an industrial data module, and inputs the acquired data into a data acquisition and storage processing module through a safety protection module for processing and storage. And the forwarding module is used for selecting demand data from data in industrial production, and forwarding and outputting the demand data to external receiving equipment. According to the industrial control data acquisition and forwarding system, due to the arrangement of the safety protection module, the technical effects of preventing network attacks and malicious invasion, guaranteeing the safety of production data, protecting key equipment and systems and improving the operation stability of the system can be realized, and the problems that the industrial control data acquisition and forwarding system in the prior art is lack of safety protection; data security risks exist, and serious potential safety hazards are brought to enterprise production.

Description

TECHNICAL FIELD

[0001] The utility model belongs to the industrial control system information security technical field, concretely relates to an industrial control data acquisition and forwarding system. BACKGROUND

[0002] Industrial control data acquisition and forwarding system is a system specially designed for industrial automation field, aims at realizing real -time acquisition, processing and transmission of production field data, this system as the " nerve center " of industrial automation control has important significance to ensure the stable operation of production line and provides key support for subsequent data analysis and optimization decision. With the expansion of industrial production scale and the improvement of process complexity, industrial control data acquisition and forwarding system has wide application prospect, provides strong support for the sustainable development of industry.

[0003] In the application of industrial control data acquisition and forwarding system, the collected industrial data is often sent to external agencies, such as superior unit or department, to improve production efficiency and intelligent level.

[0004] However, the existing industrial control data acquisition and forwarding system lacks safety protection measures, and there is a data security risk when forwarding industrial control data, which brings serious safety hazards to the production of enterprises. UTILITY MODEL CONTENT

[0005] In order to solve the technical problem of lacking safety protection in the prior art industrial control data acquisition and forwarding system, the utility model provides an industrial control data acquisition and forwarding system.

[0006] In order to realize the above-mentioned purpose, the utility model adopts the following technical scheme:

[0007] An industrial control data acquisition and forwarding system, comprising: industrial data module, data acquisition and storage processing module, forwarding module and safety protection module;

[0008] The industrial data module is used for real-time acquisition of data in industrial production and transmission to the data acquisition and storage processing module;

[0009] The data acquisition and storage processing module is connected with the industrial data module and the forwarding module respectively, is used for receiving and storing the data in industrial production, and sends the data in industrial production to the forwarding module;

[0010] The forwarding module is connected with external receiving equipment, is used for receiving the data in industrial production, and forwards the data in industrial production to external receiving equipment;

[0011] The security protection module is arranged between the industrial data module and the data acquisition and storage processing module, and connects the industrial data module and the data acquisition and storage processing module.

[0012] Optionally, the security protection module comprises a firewall component and a protocol conversion component.

[0013] The industrial data module comprises a distributed control system, a programmable logic controller, a gas detection system, a major hazard source data device, a paperless recorder, a water meter and an electric meter.

[0014] The distributed control system, the programmable logic controller, the gas detection system and the major hazard source data device are connected to the data acquisition and storage processing module through the firewall component.

[0015] The paperless recorder, the water meter and the electric meter are connected to the data acquisition and storage processing module through the protocol conversion component.

[0016] Optionally, the protocol conversion component is a Modbus to TCP / IP protocol converter.

[0017] Optionally, the data acquisition and storage processing module comprises an acquisition switch, a core switch and a storage component.

[0018] The acquisition switch is connected to the distributed control system, the programmable logic controller, the gas detection system and the major hazard source data device through the firewall component, and is connected to the paperless recorder, the water meter and the electric meter through the protocol conversion component, and is used to receive data in industrial production.

[0019] The core switch is connected to the acquisition switch and the storage component, and is used to output data in industrial production to the storage component.

[0020] Optionally, the storage component comprises a data acquisition server and a historical data server.

[0021] The data acquisition server and the historical data server are connected to the core switch, and the data acquisition server is connected to the forwarding module.

[0022] The data acquisition server is used to acquire data in industrial production in real time through the core switch and the acquisition switch.

[0023] The historical data server is used to store data in industrial production.

[0024] Optionally, the data acquisition and storage processing module further comprises a dispatching operation device, the dispatching operation device being connected to the core switch.

[0025] Optionally, the forwarding module comprises a data delivery switch and a data delivery server, the data delivery server being connected to the data acquisition server through the data delivery switch, and the data delivery server being connected to an external receiving device.

[0026] The data delivery server is configured to select data from the data acquired by the data acquisition server in the industrial production and send the data to the external receiving device.

[0027] Optionally, the forwarding module further comprises an industrial gateway, the industrial gateway being connected between the data delivery server and the external receiving device.

[0028] Optionally, the data acquisition server, the historical data server and the data delivery server adopt InPlant SCADA software.

[0029] The industrial control data acquisition and forwarding system has the following advantages:

[0030] The industrial control data acquisition and forwarding system provided by the present application utilizes an industrial data module to acquire data in real time in industrial production, inputs the acquired data into a data acquisition and storage processing module through a security protection module for processing and storage, utilizes a forwarding module to select required data from the data in industrial production, and forwards and outputs the data to an external receiving device. BRIEF DESCRIPTION OF DRAWINGS

[0031] Figure 1 is a schematic view of the industrial control data acquisition and forwarding system in the present application;

[0032] Figure 2 is a schematic view of the industrial control data acquisition and forwarding system in the present application.

[0033] Wherein: 1, industrial data module; 2, data acquisition and storage processing module; 21, acquisition switch; 22, core switch; 23, data acquisition server; 24, historical data server; 25, dispatching operation equipment; 3, forwarding module; 31, data sending switch; 32, data sending server; 33, industrial gateway; 4, security protection module; 41, firewall component; 42, protocol conversion component; 5, external receiving equipment. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical scheme and advantages of the embodiments of the present application more clear, the technical scheme in the embodiments of the present application will be described clearly and completely below in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. The description of the at least one exemplary embodiment is actually only illustrative, but not as any limitation on the present application and its application or use. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0035] It should be noted that the terms used herein are only intended to describe specific embodiments, and are not intended to limit the exemplary embodiments according to the present application. As used herein, the singular form is intended to include the plural form, unless the context clearly indicates otherwise, and it should also be understood that when the terms "comprise" and / or "include" are used in the specification, there is a presence of a feature, step, operation, device, component and / or combination thereof.

[0036] Unless specifically stated otherwise, the relative arrangement of components and steps, numerical expressions, and numerical values set forth in the various embodiments described herein are not limiting of the scope of the present application. Also, it is to be understood that the various equivalents, forms, and modifications of the present application as described herein can be made without departing from the scope thereof and that the exemplary embodiments are to be considered in a descriptive sense only and not for purposes of limitation. The examples set forth herein are presented by way of example only and are not intended to be limiting. Other examples of the exemplary embodiments can have different values for the parameters set forth. It is to be understood that the phraseology or terminology employed herein, and not otherwise expressly set forth in this specification, is taken to have the ordinary meaning as is accorded to such phraseology or terminology in the relevant trade and that the various embodiments described herein are not limited by such phrasing or terminologies. As used herein, the use of the alternative (e.g., "or", "either") is intended to mean an inclusive "or" in at least one embodiment. The use of "one" or "another" is intended to mean at least one, but this does not exclude a plurality. The components, steps, and / or functions discussed in the embodiments described herein can be implemented as hardware, software, firmware or any combination thereof. It should be noted that the various components, steps, and / or functions discussed in the embodiments described herein can be implemented in hardware, software, firmware or any combination thereof and described herein in terms of one or more processors executing computer-executable instructions and / or one or more devices executing instructions at a processing system. However, a person of ordinary skill in the art will recognize that the various hardware and software based implementations can provide different advantages for different implementations of the exemplary embodiments described herein.

[0037] In addition, it needs to be explained that the use of "first", "second" and the like to limit parts is only for the convenience of distinguishing the corresponding parts, and the above words have no special meaning if there is no further declaration, so it cannot be understood as a limitation on the protection scope of the utility model.

[0038] It needs to be explained that the embodiments in the utility model and the features in the embodiments can be combined with each other without conflict. The utility model will be described in detail below with reference to the drawings and in combination with embodiments.

[0039] Referring to Figure 1 and Figure 2 , a schematic diagram of an industrial control data acquisition and forwarding system provided by the utility model is shown, and the system comprises: an industrial data module 1, a data acquisition and storage processing module 2, a forwarding module 3 and a safety protection module 4; the industrial data module 1 is used for acquiring data in industrial production in real time and transmitting the data to the data acquisition and storage processing module 2; the data acquisition and storage processing module 2 is connected with the industrial data module 1 and the forwarding module 3, is used for receiving and storing data in industrial production, and sends the data in industrial production to the forwarding module 3; the forwarding module 3 is connected with an external receiving device 5, is used for receiving data in industrial production, and forwards the data in industrial production to the external receiving device 5; the safety protection module 4 is arranged between the industrial data module 1 and the data acquisition and storage processing module 2, and is connected with the industrial data module 1 and the data acquisition and storage processing module 2.

[0040] In the embodiment, an industrial control data acquisition and forwarding system is provided, which acquires data in industrial production in real time by using the industrial data module 1, processes and stores the acquired data in the data acquisition and storage processing module 2 through the safety protection module 4, selects required data from the data in industrial production by using the forwarding module 3, and outputs the data to the external receiving device 5. In the utility model, since the safety protection module 4 is arranged, the technical effects of preventing network attacks and malicious intrusion, guaranteeing production data security, protecting key equipment and system and improving system operation stability can be achieved, and the technical problem that the industrial control data acquisition and forwarding system lacks safety protection, has data security risks and brings serious security risks to enterprise production in the prior art is avoided.

[0041] Optionally, the safety protection module 4 in the utility model includes firewall assembly 41 and protocol conversion assembly 42;The industrial data module 1 includes distributed control system, programmable logic controller, gas detection system, major hazard source data equipment, paperless recorder, water meter and electric meter;Distributed control system, programmable logic controller, gas detection system, major hazard source data equipment are connected data acquisition and storage processing module 2 through firewall assembly 41;Paperless recorder, water meter and electric meter are connected data acquisition and storage processing module 2 through protocol conversion assembly 42.

[0042] In the embodiment, the production data obtained in distributed control system (DCS), programmable logic controller (PLC), gas detection system (GDS) and major hazard source data equipment are encrypted and protected by firewall assembly 41, and distributed control system (DCS), programmable logic controller (PLC), gas detection system (GDS) and major hazard source data equipment are isolated from the outside, to improve the security of production data;The data obtained in paperless recorder, water meter and electric meter are converted by protocol conversion assembly 42, so that data acquisition and storage processing module 2 can collect, process and store data.

[0043] Further, the gas detection system (GDS) in the embodiment can include toxic gas detection system, combustible gas detection system or other gas detection system;Major hazard source data equipment can specifically include major hazard source monitoring and early warning system, safety instrument system (SIS), for primary or secondary major hazard sources of toxic gas, liquefied gas, highly toxic liquid, to ensure safety control in emergency.

[0044] Optionally, the protocol conversion assembly 42 in the utility model is Modbus to TCP / IP protocol converter.

[0045] In the embodiment, the data obtained in paperless recorder, water meter and electric meter in the production process are converted from traditional Modbus to TCP / IP protocol, so that the data can be stored and processed by data acquisition and storage processing module 2.

[0046] Optionally, the data acquisition and storage processing module 2 in the utility model includes acquisition switch 21, core switch 22 and storage assembly;Acquisition switch 21 is connected with distributed control system, programmable logic controller, gas detection system and major hazard source data equipment through firewall assembly 41, and acquisition switch 21 is connected with paperless recorder, water meter and electric meter through protocol conversion assembly 42, for receiving data in industrial production;Core switch 22 is connected with acquisition switch 21 and storage assembly, for outputting data in industrial production to storage assembly.

[0047] Optionally, the storage assembly in the utility model includes data acquisition server 23 and historical data server 24;Data acquisition server 23 and historical data server 24 are all connected with core switch 22, and data acquisition server 23 is connected with forwarding module 3;Data acquisition server 23 is used to acquire the data in industrial production in real time through core switch 22 and acquisition switch 21;Historical data server 24 is used to store the data in industrial production.

[0048] In the embodiment, the data in industrial data module 1, such as distributed control system, programmable logic controller, gas detection system, major hazard source data equipment, paperless recorder, water meter and electric meter, is acquired by acquisition switch 21 and is transmitted to core switch 22;Core switch 22 is used as a network hub, and the data is further distributed;Data acquisition server 23 obtains the data from core switch 22 to centrally integrate and process the data;And historical data server 24 obtains the processed data from core switch 22 and stores the data to facilitate future query and analysis.

[0049] Meanwhile, in the embodiment, the server is split into data acquisition server 23 and historical data server 24, and data acquisition and storage are carried out respectively, so that the data pressure of the industrial control data acquisition and forwarding system is greatly reduced.

[0050] Further, the firewall assembly 41 in the embodiment can be selected as TEG5612 type firewall.

[0051] Further, the acquisition switch 21 in the embodiment can be selected as S5720-28P-SI type switch.

[0052] It should be noted that the specific model of firewall assembly 41 and acquisition switch 21 can be selected according to the actual production and use demand, and the embodiment only provides some selectable examples.

[0053] Optionally, the data acquisition and storage processing module 2 in the utility model further includes dispatching operation equipment 25, and the dispatching operation equipment 25 is connected with the core switch 22.

[0054] In the embodiment, the dispatching operation equipment is arranged and connected with the core switch 22, in the use process, the staff can utilize the dispatching operation equipment 25 to carry out the real-time monitoring and operation to the data passing through the core switch 22, and also can manually write or rewrite some data that is not easy to acquire or has error, so as to improve the flexibility of the industrial control data acquisition and forwarding system.

[0055] Optionally, the forwarding module 3 in the utility model includes data sending switch 31 and data sending server 32, data sending server 32 is connected data acquisition server 23 through data sending switch 31, and data sending server 32 is connected external receiving equipment 5;Data sending server 32 is used to select data from the data in the industrial production that data acquisition server 23 has acquired and sends to external receiving equipment 5.

[0056] In the embodiment, the forwarding module includes data sending switch 31 and data sending server 32, utilizes data sending switch 31 to obtain part of the data after processing from data acquisition server 23 and sends it to external receiving equipment 5 through data sending server 32, so that the status of industrial production is acquired in real time by the superior department or government organization, provides timely and reliable information support for production scheduling, thereby improving production efficiency, reducing equipment downtime, and guaranteeing production continuity.

[0057] Optionally, the forwarding module 3 in the utility model further includes industrial gateway 33, and the industrial gateway 33 is connected between the data sending server 32 and the external receiving equipment 5.

[0058] In the embodiment, the industrial gateway 33 is arranged between the data sending server 32 and the external receiving equipment 5, and the sent data is sent after being safely isolated through the industrial gateway 33, so as to ensure the safety and compliance in the data sending process.

[0059] Further, the industrial gateway 33 in the embodiment can be selected as the SU-IFGAP3000-XBGID120 type industrial gateway.

[0060] Further, the external receiving equipment 5 can be a government organization network or a mobile device.

[0061] Optionally, the processing software adopted by the data acquisition server 23, the historical data server 24 and the data sending server 32 in the utility model is InPlant SCADA software.

[0062] In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "exemplary embodiment", "example", "specific example" or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the utility model. In the present specification, the exemplary description of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0063] Although the embodiments of the utility model have been shown and described, those of ordinary skill in the art can understand that various changes, modifications, replacements and variations can be made to these embodiments without departing from the principles and purposes of the utility model, and the scope of the utility model is defined by the claims and their equivalents.

Claims

1. An industrial control data acquisition and forwarding system, characterized in that, The industrial control data acquisition and forwarding system includes an industrial data module (1), a data acquisition and storage processing module (2), a forwarding module (3), and a security protection module (4); The industrial data module (1) is used to acquire data in industrial production in real time and transmit it to the data acquisition and storage processing module (2); The data acquisition and storage processing module (2) is connected to the industrial data module (1) and the forwarding module (3) respectively, and is used to receive and store data in industrial production and send data in industrial production to the forwarding module (3); The forwarding module (3) is connected to the external receiving device (5) and is used to receive data in industrial production and forward the data in industrial production to the external receiving device (5); The safety protection module (4) is located between the industrial data module (1) and the data acquisition and storage processing module (2), and is connected between the industrial data module (1) and the data acquisition and storage processing module (2).

2. The industrial control data acquisition and forwarding system according to claim 1, characterized in that, The security protection module (4) includes a firewall component (41) and a protocol conversion component (42); The industrial data module (1) includes a distributed control system, a programmable logic controller, a gas detection system, a major hazard source data device, a paperless recorder, a water meter, and an electricity meter; The distributed control system, the programmable logic controller, the gas detection system, and the major hazard source data equipment are all connected to the data acquisition and storage processing module (2) through the firewall component (41); The paperless recorder, the water meter, and the electricity meter are all connected to the data acquisition and storage processing module (2) through the protocol conversion component (42).

3. The industrial control data acquisition and forwarding system according to claim 2, characterized in that, The protocol conversion component (42) is a Modbus to TCP / IP protocol converter.

4. The industrial control data acquisition and forwarding system according to claim 2, characterized in that, The data acquisition and storage processing module (2) includes an acquisition switch (21), a core switch (22), and a storage component; The data acquisition switch (21) is connected to the distributed control system, the programmable logic controller, the gas detection system and the major hazard source data equipment through the firewall component (41), and the data acquisition switch (21) is connected to the paperless recorder, the water meter and the electricity meter through the protocol conversion component (42) to receive data in industrial production; The core switch (22) is connected to the acquisition switch (21) and the storage component, and is used to output data from industrial production to the storage component.

5. The industrial control data acquisition and forwarding system according to claim 4, characterized in that, The storage components include a data acquisition server (23) and a historical data server (24); The data acquisition server (23) and the historical data server (24) are both connected to the core switch (22), and the data acquisition server (23) is connected to the forwarding module (3); The data acquisition server (23) is used to collect data in industrial production in real time through the core switch (22) and the acquisition switch (21); The historical data server (24) is used to store data from industrial production.

6. The industrial control data acquisition and forwarding system according to claim 5, characterized in that, The data acquisition and storage processing module (2) further includes a scheduling operation device (25), which is connected to the core switch (22).

7. The industrial control data acquisition and forwarding system according to claim 5, characterized in that, The forwarding module (3) includes a data transmission switch (31) and a data transmission server (32). The data transmission server (32) is connected to the data acquisition server (23) through the data transmission switch (31), and the data transmission server (32) is connected to an external receiving device (5). The data transmission server (32) is used to select data from the data collected by the data acquisition server (23) in industrial production and send it to an external receiving device (5).

8. The industrial control data acquisition and forwarding system according to claim 7, characterized in that, The forwarding module (3) also includes an industrial gateway (33), which is connected between the data transmission server (32) and the external receiving device (5).

9. The industrial control data acquisition and forwarding system according to claim 7, characterized in that, The data acquisition server (23), the historical data server (24), and the data transmission server (32) all use InPlantSCADA software for processing.

Images