Data security encoder for gas pressure regulating equipment

Abstract

The utility model provides a data safety encoder for gas pressure regulating equipment, which comprises a control panel arranged on the gas pressure regulating equipment. The control panel is provided with a main control unit, a data safety module used for ensuring data safety, an anti-disassembly key module used for detecting whether the gas pressure regulating device is illegally disassembled or not, a USB interface module, a serial port module, a Bluetooth module, a crystal oscillator module, an SWD interface module and a power management module used for providing power for all the modules. The main control unit is respectively connected with the data security module, the anti-disassembly key module, the USB interface module, the serial port module, the Bluetooth module, the crystal oscillator module and the SWD interface module; compared with the prior art, the gas pressure regulating device has the advantages that the safety of the device in the data storage and communication process can be guaranteed, the attack resistance of the device is improved, the safety of the device in the physical level is guaranteed, the safety and reliability of the gas pressure regulating device are improved, and the safety and stability of gas supply are guaranteed.

Description

Technical Field

[0001] This utility model relates to the field of data security technology for gas pressure regulating equipment, and in particular to a data security encoder for gas pressure regulating equipment. Background Technology

[0002] Against the backdrop of China's active efforts to achieve its carbon peaking and carbon neutrality goals, the construction of urban gas pipeline networks is steadily expanding. With the annual growth in the number of industrial, commercial, and residential gas users, the number of gas pressure regulating devices, a crucial link in the transmission process, is also increasing accordingly. However, urban gas networks face increasingly severe challenges in terms of pipeline and equipment maintenance.

[0003] As a crucial link in the gas transmission process, gas pressure regulating equipment is undergoing a technological transformation from traditional mechanical control to intelligent and modern systems. In this process, most equipment uses custom data protocols for communication, with many manufacturers employing custom Modbus or proprietary protocols modified from the CJT188 standard. While these proprietary protocols meet specific needs to some extent, they generally suffer from insufficient data protection, making communication vulnerable to cracking and attacks. The gas industry, as a vital component of basic industries and a vital part of people's livelihoods, considers ensuring gas supply and safe gas application paramount. Therefore, ensuring the safe and stable operation of gas pressure regulating equipment is particularly critical in today's complex and volatile environment.

[0004] Therefore, the potential data security risks associated with gas pressure regulating equipment are as follows:

[0005] 1. Regarding data storage security: Embedded electronic products typically use a combination of microcontrollers and external memory to store long-term operational data and logs. However, this design is vulnerable to hacking in today's highly advanced electronic technology. Domestically and internationally, security measures for such designs often employ periodic two-way verification between the microcontroller and external memory. If the password read by the microcontroller does not match the design, the system stops operating, preventing unauthorized modification of the external memory. However, if the microcontroller is hacked and its internal firmware copied, this strategy becomes ineffective. Therefore, a more secure data storage solution is needed to ensure the security and integrity of critical data in gas pressure regulating equipment.

[0006] 2. Regarding data communication security: In addition to utilizing 4G cellular networks, gas pressure regulating equipment also needs to incorporate near-end communication, typically using wired RS485 differential signal transmission. Wired communication, especially RS485 bus, allows attackers to physically access the bus and eavesdrop on all communication commands and responses. Similarly, 4G signals can be intercepted by attackers using unauthorized base stations. Therefore, software-level encryption and decryption alone are insufficient; a more secure communication protocol and encryption mechanism are needed to protect data transmission security.

[0007] 3. Regarding physical safety: Gas pressure regulating equipment also faces the risk of unauthorized disassembly and tampering at the physical level. An effective physical safety mechanism, such as an anti-tamper detection module, is needed to detect and prevent unauthorized disassembly, ensuring the equipment's physical safety. Utility Model Content

[0008] In view of the shortcomings of the prior art described above, the purpose of this utility model is to provide a data security encoder for gas pressure regulating equipment, which solves the problems of data storage vulnerabilities in existing gas pressure regulating equipment, information theft risks during data communication, and the risk of illegal disassembly of gas pressure regulating equipment at the physical level.

[0009] To achieve the above and other related objectives, this utility model provides the following technical solution:

[0010] A data security encoder for a gas pressure regulating device includes a control panel mounted on the gas pressure regulating device. The control panel includes a main control unit, a data security module for ensuring data security, an anti-tamper button module for detecting unauthorized disassembly of the gas pressure regulating device, a USB interface module for providing convenient data transmission and device charging functions, a serial port module for wired communication with external devices, and a Bluetooth module for wireless communication with external devices. The control panel also includes a crystal oscillator module for ensuring the performance stability of the main control unit, an SWD interface module for debugging and programming the main control unit, and a power management module for providing power to each module. The main control unit is connected to the data security module, the anti-tamper button module, the USB interface module, the serial port module, the Bluetooth module, the crystal oscillator module, and the SWD interface module.

[0011] In one embodiment of this utility model, the main control unit includes a main control chip, three control terminals of the main control chip are connected to the data security module, one control terminal of the main control chip is connected to the anti-tamper button module, two control terminals of the main control chip are connected to the USB interface module, two control terminals of the main control chip are connected to the serial port module, six control terminals of the main control chip are connected to the Bluetooth module, two control terminals of the main control chip are connected to the crystal oscillator module, and two control terminals of the main control chip are connected to the SWD interface module.

[0012] In one embodiment of this utility model, the data security module includes an embedded security chip customized based on the national cryptographic SM4 algorithm. Three control terminals of the security chip are connected to the main control unit, and the security chip is equipped with SM2 signature algorithm, SM4 symmetric encryption algorithm and SM3 hash algorithm.

[0013] In one embodiment of this utility model, the anti-tamper button module includes a button switch and a sixth resistor. Two ports of the anti-tamper button are connected to the main control unit through the sixth resistor. The anti-tamper button module also includes a button housing and a button that passes through the button housing. The end of the button away from the button housing is connected to the main board of the gas pressure regulating device. The button is provided with a spring installed in the button housing.

[0014] In one embodiment of the present invention, the USB interface module includes a USB connector and a protector, wherein four ports of the USB connector are connected to the protector, and two ports of the protector are connected to the main control unit.

[0015] In one embodiment of the present invention, the serial port module includes a serial port chip, and two control terminals of the serial port chip are connected to the main control unit.

[0016] In one embodiment of the present invention, the Bluetooth module includes a Bluetooth chip, a 47th resistor, and a 48th resistor. Four control terminals of the Bluetooth chip are connected to the main control unit, and two control terminals of the Bluetooth chip are respectively connected to the main control unit through the 47th resistor and the 48th resistor.

[0017] In one embodiment of the present invention, the crystal oscillator module includes a crystal oscillator, and two ports of the crystal oscillator are connected to the main control unit.

[0018] In one embodiment of the present invention, the SWD interface module includes a connector, and two ports of the connector are connected to the main control unit.

[0019] As described above, the data safety encoder for gas pressure regulating equipment of this utility model has the following beneficial effects:

[0020] The security chip in this invention is an embedded security chip customized based on the national cryptographic SM4 algorithm. Furthermore, this security chip employs the SM2 signature algorithm, the SM4 symmetric encryption algorithm, and the SM3 hash algorithm. The SM2 signature algorithm is used for digital signatures and key exchange; the SM4 symmetric encryption algorithm is used for encryption and decryption of communication data to ensure data security; and the SM3 hash algorithm is used for data storage verification to ensure data integrity. This solves the hidden dangers and risks in data storage and communication security of gas pressure regulating equipment. Simultaneously, the anti-tamper button in this invention is in a depressed state after the motherboard is assembled, at which point the circuit is connected. When the motherboard is disassembled, the button's rebound circuit is disconnected, thus solving the risk of illegal disassembly and tampering of the gas pressure regulating equipment at the physical level. Therefore, this invention can ensure the security of the equipment during data storage and communication, improve the equipment's resistance to attacks, and ensure the equipment's physical security, contributing to the improvement of the security and reliability of gas pressure regulating equipment and ensuring the safety and stability of gas supply. Attached Figure Description

[0021] Figure 1 The diagram shown is an overall structural block diagram disclosed in the embodiments of this utility model.

[0022] Figure 2 The diagram shown is a left-side frontal perspective three-dimensional view of the control panel disclosed in the embodiment of this utility model;

[0023] Figure 3 The diagram shown is a right-side frontal perspective three-dimensional view of the control panel disclosed in the embodiment of this utility model.

[0024] Figure 4 The circuit diagram shown is of the main control unit disclosed in the embodiment of this utility model;

[0025] Figure 5 The diagram shown is a circuit schematic of the data security module disclosed in this embodiment of the present invention.

[0026] Figure 6 The diagram shown is a circuit schematic of the anti-tamper button module disclosed in the embodiments of this utility model.

[0027] Figure 7 The image shown is a three-dimensional schematic diagram of the anti-tamper button disclosed in the embodiments of this utility model;

[0028] Figure 8 The diagram shown is a partial cross-sectional perspective view of the tamper-proof button disclosed in the embodiment of this utility model.

[0029] Figure 9 The diagram shown is a circuit schematic of the USB interface module disclosed in this embodiment of the present utility model.

[0030] Figure 10 The diagram shown is a circuit schematic of the serial port module disclosed in this embodiment of the present utility model.

[0031] Figure 11 The diagram shown is a circuit schematic of the Bluetooth module disclosed in the embodiments of this utility model.

[0032] Figure 12 The diagram shown is a circuit schematic of the crystal oscillator module disclosed in the embodiments of this utility model;

[0033] Figure 13 The diagram shown is a circuit schematic of the SWD interface module disclosed in this embodiment of the present invention.

[0034] Figure 14 The diagram shown is a circuit schematic of the power management module disclosed in the embodiments of this utility model.

[0035] Figure 15 The diagram shown is a software architecture diagram of the data security encoder disclosed in the embodiments of this utility model;

[0036] Figure 16 This is a flowchart illustrating the overall power-on process of the system disclosed in this embodiment of the present invention.

[0037] Component designation explanation

[0038] 1. Control panel; 2. Main control unit; 3. Data security module; 4. Anti-tamper button module; 401. Button housing; 402. Button; 403. Spring; 5. USB interface module; 6. Serial port module; 7. Bluetooth module; 8. Power management module. Detailed Implementation

[0039] The following specific examples illustrate the implementation of this utility model. Those skilled in the art can easily understand other advantages and effects of this utility model from the content disclosed in this specification. It should be noted that, unless otherwise specified, the following embodiments and features described herein can be combined with each other.

[0040] Please see Figures 1 to 3 This utility model provides a data security encoder for a gas pressure regulating device, including a control panel 1 installed on the gas pressure regulating device. The control panel 1 is equipped with a main control unit 2, a data security module 3, an anti-tamper button module 4, a USB interface module 5, a serial port module 6, and a Bluetooth module 7. The control panel 1 is also equipped with a crystal oscillator module, an SWD interface module, and a power management chip 8 that provides power to each module.

[0041] Please see Figure 4 The main control unit 2 includes a main control chip, a fourth resistor, a fifth resistor, and other circuit components. In this embodiment, the main control chip is an STM32G0B1CBT6. The following description uses the main control chip U7, the fourth resistor R4, and the fifth resistor R5 as examples.

[0042] Pins 12 to 14 of the main control chip U7 are three control terminals, all of which are connected to the data security module. Pin 25 of the main control chip U7 is one of the control terminals, which is connected to the anti-tamper button module. Pins 33 and 34 of the main control chip U7 are two control terminals, both of which are connected to the USB interface module. Pins 28 and 29 of the main control chip U7 are two control terminals, which are connected to the serial port module through resistor R5 and resistor R4, respectively.

[0043] Pins 19 to 24 of the main control chip U7 are six control terminals, all of which are connected to the Bluetooth module. Pins 8 and 9 of the main control chip U7 are two control terminals, both of which are connected to the crystal oscillator module. Pins 35 and 36 of the main control chip U7 are two control terminals, both of which are connected to the SWD interface module. The main control unit 2 is also a microprocessor. As the control center, the microprocessor can communicate with external devices via wired communication through the serial port chip U9 (described below) or wireless communication through the Bluetooth chip U12 (described below).

[0044] Please see Figure 5 The data security module 3 includes an embedded security chip customized based on the national cryptographic SM4 algorithm. In this embodiment, the security chip model is SF_ESAM. The following uses the security chip U6 as an example for explanation.

[0045] Pins 3, 6, and 7 of the security chip U6 are three control terminals, all connected to the main control unit. The security chip U6 is responsible for handling all security-related tasks, ensuring data security and integrity. This means that device data storage and communication data encryption / decryption are all handled by the security chip U6. The security chip U6 conforms to the Trusted Platform Module (TPM) standard; it is a device with its own processor and storage unit, capable of independently performing key generation and encryption / decryption operations. The device stores keys and feature data to provide encryption services. In this embodiment, the security chip U6 is a customized security chip that meets the requirements of the national cryptographic level 2 standard. Compared with general security chips, the differences lie in the use of multiple sets of key management, encryption / decryption rules, and a more scalable binary file. The security chip U6 uses the SM2 signature algorithm for digital signatures and key exchange; the SM4 symmetric encryption algorithm for encrypting and decrypting communication data to ensure data security; and the SM3 hash algorithm for data storage verification to ensure data integrity. Because the keys used for encryption and decryption are stored in hardware, stolen communication data cannot be decrypted.

[0046] Please see Figures 6 to 8 The anti-tamper button module 4 includes a button switch, a sixth resistor, a seventh resistor, and a fifty-first capacitor. In this embodiment, the button switch is model XKB5858-W-75. The following description will use the button switch SW3, the sixth resistor R6, the seventh resistor R7, and the fifty-first capacitor C51 as examples.

[0047] The first and fourth pins of push-button switch SW3 are two ports. Both the first and fourth pins of push-button switch SW3 are connected to the main control unit via the sixth resistor R6. The first and fourth pins of push-button switch SW3 are also connected to a voltage source via the sixth resistor R6 and the seventh resistor R7. The first and fourth pins of push-button switch SW3 are also connected to the positive terminal of the fifty-first capacitor C51. The second and fifth pins of push-button switch SW3 and the negative terminal of the fifty-first capacitor C51 are all grounded. The tamper-proof button module 4 also includes a button housing 401 and a through-hole... A button 402 is installed inside the button housing 401. The end of the button 402 away from the button housing 401 is connected to the main board of the gas pressure regulating device. A spring 403 is installed inside the button 402 and installed inside the button housing 401. The anti-tamper button is equivalent to a circuit switch with an internal spring 403. Pressing down on the button 402 indicates that the switch is on, and releasing the button 402 indicates that the switch is off. The anti-tamper button is in the pressed state after the main board is assembled, and the circuit is connected at this time. When the main board is disassembled, the return circuit of the button 402 is disconnected.

[0048] Please see Figure 9 The USB interface module 5 includes a USB connector, a protector, and other circuit components. In this embodiment, the USB connector is model TYPE-C 16PIN 2MD(073), and the protector is model USBLC6-2SC6. The following description uses the USB connector USB1 and the protector D1 as examples.

[0049] The fifth to eighth pins of the USB connector USB1 are four of the ports. The fifth and seventh pins of the USB connector USB1 are connected to the fourth pin of the protector D1. The sixth and eighth pins of the USB connector USB1 are connected to the sixth pin of the protector D1. The first and third pins of the protector D1 are two of the ports. The first and third pins of the protector D1 are connected to the main control unit. The USB interface module is a USB-Type C interface.

[0050] Please see Figure 10 The serial port module includes a serial port chip, a first connector, and other circuit components. In this embodiment, the serial port chip is RS0102YH8. The following description uses the serial port chip U9 and the first connector CN2 as examples.

[0051] The second and third pins of the serial port chip U9 are two of the control terminals. Both the second and third pins of the serial port chip U9 are connected to the main control unit. The fifth to eighth pins of the serial port chip U9 are connected to the first connector CN2. The serial port COM chip U9 provides a TTL interface to complete serial communication.

[0052] Please see Figure 11 The Bluetooth module includes a Bluetooth chip, a 47th resistor, a 48th resistor, and other circuit components. In this embodiment, the Bluetooth chip is a DB809S. The following description uses Bluetooth chip U12, 47th resistor R47, and 48th resistor R48 as examples.

[0053] The sixth and ninth to eleventh pins of the Bluetooth chip U12 are four control terminals, all of which are connected to the main control unit. The seventh and eighth pins of the Bluetooth chip U12 are two control terminals, which are connected to the main control unit through the forty-seventh resistor R47 and the forty-eighth resistor R48, respectively. The Bluetooth chip U12 is used to access the security chip U6 through the Bluetooth data link.

[0054] Please see Figure 12 and Figure 13The crystal oscillator module includes a crystal oscillator and other circuit components. The SWD interface module includes a second connector. The following explanation will use crystal oscillator X1 and second connector CN1 as examples.

[0055] The first and third pins of the crystal oscillator X1 are two ports, and both the first and third pins of the crystal oscillator X1 are connected to the main control unit; the second and third pins of the second connector CN1 are two ports, and both the second and third pins of the second connector CN1 are connected to the main control unit.

[0056] Specifically, the core components of this utility model include a microprocessor U7, an embedded security chip U6 customized with the national cryptographic SM4 algorithm, an anti-tamper button SW3, a USB Type-C interface USB1, a serial port chip U9, a Bluetooth chip U12, and a power management chip U5. The microprocessor U7 serves as the control center, enabling wired communication with external devices via the serial port chip U9 and wireless communication via the Bluetooth chip U12. The security chip U6 is responsible for handling all security-related tasks, ensuring the security and integrity of data. This solution can provide secure and portable data encryption / decryption and data storage services for intelligent equipment in gas pressure regulating stations.

[0057] More specifically, the hardware architecture of this utility model is designed as follows: 1. Microprocessor U7: As the brain of the system, it handles various tasks and communications; 2. Embedded security chip U6: Based on the national cryptographic SM4 algorithm, it provides deeply customized security protection; 3. Anti-tamper button SW3: Used to detect whether the device has been illegally disassembled, enhancing physical security; 4. USB Type-C interface: Provides convenient data transmission and device charging functions; 5. Serial port chip U9: Enables wired communication with external devices; 6. Bluetooth chip U12: Enables wireless communication with external devices; 7. Power management chip U6: Used to convert 5V to 3V voltage, responsible for stable power supply and energy consumption management, ensuring normal operation of the device.

[0058] Furthermore, the software architecture design of this utility model adopts the FreeRTOS real-time operating system, and is divided into task management, application modules, and a driver layer from top to bottom, such as... Figure 15 As shown, each layer provides different functions and interfaces, realizing the modular and hierarchical design of the system and improving the system's maintainability, scalability and portability;

[0059] 1. Task Management: (1) Event Management Task, responsible for handling system events, such as interrupts, timers, etc.; (2) Bluetooth Communication Task, responsible for managing Bluetooth communication-related tasks; (3) Serial Communication Task, responsible for managing serial communication-related tasks; (4) Security Chip Communication Task, responsible for communicating with security chips (such as ESAM); (5) System Scheduling is responsible for scheduling tasks according to their priority and status to ensure timely execution; (6) The FreeRTOS interface provides APIs for interacting with the RTOS, enabling the application layer to create tasks, configure timers, send messages, etc.

[0060] 2. Application Modules: Application modules are the specific business logic implementations of the system, including: (1) Log module, used to record system logs; (2) Anti-tamper detection module, used to detect whether the equipment has been illegally disassembled; (3) Communication protocol module, to implement the private communication protocol of the gas pressure regulating equipment; (4) Security chip communication module, a module that communicates with the security chip; (5) Serial communication module, a module that implements serial communication function; (6) Bluetooth communication module, a module that implements Bluetooth communication function; (7) Third-party module libraries provide some additional functions, such as algorithm libraries, encryption libraries, etc., which can be called by application modules; 3. Driver Layer: The driver layer is responsible for direct interaction with the hardware, including the STM32G0XX hardware abstraction layer library provided by the chip manufacturer and custom peripheral drivers.

[0061] To elaborate further, the system power-on process is as follows: Figure 16 Step 1: Power on or reset the microprocessor. A reset could be caused by a watchdog timeout or a software reset. Step 2: The bootloader selects and loads the code partition, performs hardware initialization and USB initialization, and then starts the FreeRTOS system scheduler after all partition code initializations are complete. Step 3: Once a USB or serial bus connection is established, wait for bus data transmission and reception. If data is available, notify the security protocol processing task for parsing and response. Step 4: If there is no operation, the system enters an idle state and continues to wait for USB or serial bus data. If a bus anomaly is detected, the system enters processor stop mode; otherwise, it continues running the security protocol processing task.

[0062] In summary, this invention can effectively enhance the security of the hardware and software design of gas pressure regulating equipment and simplify the complexity of software development: from the hardware perspective, the use of a customized national cryptographic security chip makes it impossible to obtain the relevant storage device through public channels, and the difficulty of cracking it is extremely high; from the software perspective, hardware-implemented data encryption and decryption is more efficient than software algorithm implementation; in addition, this invention also has the portability advantage of hot-swapping the storage device, which can reduce the risk of data backup and copying.

[0063] The above embodiments are merely illustrative of the principles and effects of this utility model and are not intended to limit this utility model. All equivalent modifications or alterations made by those skilled in the art without departing from the spirit and technical concept disclosed in this utility model should still be covered by the claims of this utility model.

Claims

1. A data security encoder for a gas pressure regulating device, comprising a control panel (1) arranged on the gas pressure regulating device, characterized in that: The control panel (1) is equipped with a main control unit (2), a data security module (3) for ensuring data security, an anti-tamper button module (4) for detecting whether the gas pressure regulating equipment has been illegally disassembled, a USB interface module (5) for providing convenient data transmission and equipment charging functions, a serial port module (6) for wired communication with external devices, and a Bluetooth module (7) for wireless communication with external devices. The control panel (1) is also equipped with a crystal oscillator module for ensuring the performance stability of the main control unit (2), an SWD interface module for debugging and programming the main control unit (2), and a power management module (8) for providing power to each module. The main control unit (2) is connected to the data security module (3), the anti-tamper button module (4), the USB interface module (5), the serial port module (6), the Bluetooth module (7), the crystal oscillator module, and the SWD interface module, respectively.

2. A data secure encoder for a gas pressure regulating device according to claim 1, characterized in that: The main control unit (2) includes a main control chip, three of the main control chip's control terminals are connected to the data security module (3), one of the main control chip's control terminals is connected to the anti-tamper button module (4), and two of the main control chip's control terminals are connected to the USB interface module (5). Two of the control terminals of the main control chip are connected to the serial port module (6), six of the control terminals of the main control chip are connected to the Bluetooth module (7), two of the control terminals of the main control chip are connected to the crystal oscillator module, and two of the control terminals of the main control chip are connected to the SWD interface module.

3. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The data security module (3) includes an embedded security chip customized based on the national cryptographic SM4 algorithm. Three of the control terminals of the security chip are connected to the main control unit (2), and the security chip is equipped with SM2 signature algorithm, SM4 symmetric encryption algorithm and SM3 hash algorithm.

4. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The anti-tamper button module (4) includes a button switch and a sixth resistor. Two ports of the anti-tamper button are connected to the main control unit (2) through the sixth resistor. The anti-tamper button module also includes a button housing (401) and a button (402) that passes through the button housing (401). The end of the button (402) away from the button housing (401) is connected to the main board of the gas pressure regulating device. The button (402) is provided with a spring (403) installed in the button housing (401).

5. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The USB interface module (5) includes a USB connector and a protector. Four ports of the USB connector are connected to the protector, and two ports of the protector are connected to the main control unit (2).

6. A data security encoder for a gas pressure regulating device according to claim 1, characterized in that: The serial port module (6) includes a serial port chip, and two of the control terminals of the serial port chip are connected to the main control unit (2).

7. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The Bluetooth module (7) includes a Bluetooth chip, a 47th resistor and a 48th resistor. Four of the control terminals of the Bluetooth chip are connected to the main control unit (2), and two of the control terminals of the Bluetooth chip are connected to the main control unit (2) through the 47th resistor and the 48th resistor, respectively.

8. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The crystal oscillator module includes a crystal oscillator, and two ports of the crystal oscillator are connected to the main control unit (2).

9. A data secure encoder for gas pressure regulating device as claimed in claim 1 wherein: The SWD interface module includes a connector, two of which are connected to the main control unit (2).

Images