Instrumentation control system with reinforced data security

Abstract

The data security enhanced instrumentation control system according to the present invention comprises a data measurement unit deployed in a measurement target facility to generate measurement data from the facility, a PLC unit that receives data from the data measurement unit and generates a control signal, a management server unit configured to communicate with the PLC unit, a data storage unit for storing data transmitted from the data measurement unit, and a manager interface unit connected to the management server unit for inputting and outputting information, wherein the PLC unit includes a PLC storage unit for storing data, and a data encryption module is connected to the data measurement unit so that the measurement data transmitted from the data measurement unit is encrypted by the data encryption module and transmitted to the PLC unit. According to the present invention, security can be enhanced in the transmission of measurement data between a PLC unit and a management server unit included in an instrumentation control system, and the security of data stored in the instrumentation control system is enhanced, thereby preventing data alteration caused by external hacking. In addition, enhanced security can be monitored and maintained.

Description

Technology Field

[0001] The present invention relates to an instrumentation control system, and more specifically, to an instrumentation control system configured to enhance data security during the operation of the entire system, including the transmission of measurement data and data storage between a PLC unit and a management server unit. Background Technology

[0002] An instrumentation control system is a system for controlling external devices connected via a PLC (Programmable Logic Controller) by analyzing and processing data such as flow rate, pressure, temperature, and humidity measured by various measuring devices through programs stored in a central processing unit.

[0003] The aforementioned instrumentation control system is primarily used in water supply or sewage treatment plants, power generation facilities, or transmission and distribution facilities, and is also currently utilized for the management of various buildings, lighting management of facilities, and power management.

[0004] Meanwhile, regarding conventional data security, research has primarily focused on the communication part of transmitting and receiving data.

[0005] However, the operation of the above instrumentation control system involves not only the transmission and reception of data but also a storage process.

[0006] Therefore, the security of the data storage unit included in the instrumentation control system also needs to be strengthened, and hacking of the various components included in the instrumentation control system must also be prevented.

[0007] However, conventional instrumentation control systems transmit and receive data using standardized communication protocols, and the anti-hacking measures for the components included in them are also insufficient. The problem to be solved

[0008] The objective of the present invention is to provide an instrumentation control system configured to enhance data security during the operation of the entire system, including the transmission of measurement data and data storage between a PLC unit and a management server unit.

[0009] Another objective of the present invention is to provide a data security enhanced instrumentation control system configured to enable monitoring of enhanced security. means of solving the problem

[0010] A data security enhanced instrumentation control system according to the present invention for achieving the above objective comprises: a data measurement unit deployed in a measurement target facility to generate measurement data from the facility; a PLC unit that receives data from the data measurement unit and generates a control signal; a management server unit configured to communicate with the PLC unit; a data storage unit for storing data transmitted from the data measurement unit; and a manager interface unit connected to the management server unit for inputting and outputting information. The PLC unit includes a PLC storage unit for storing data, and a data encryption module is connected to the data measurement unit so that measurement data transmitted from the data measurement unit is encrypted by the data encryption module and transmitted to the PLC unit.

[0011] Here, a second data storage unit for storing data transmitted from the data measurement unit in parallel may be included.

[0012] Preferably, the PLC unit includes a PLC data encryption module, and data transmitted from the PLC unit to the management server unit may be configured to be encrypted by the PLC data encryption module before transmission.

[0013] In addition, the second data storage unit includes a second data storage encryption module, and data transmitted to the second data storage unit may be configured to be encrypted and stored by the second data storage encryption module.

[0014] In addition, it can be configured so that the hash function value of the data is transmitted from the PLC unit to the management server unit along with the data.

[0015] In addition, the management server unit is provided with a digital signature unit for authenticating whether the user is an administrator, and the PLC unit may be configured to receive digital signature-based administrator authentication information from the management server unit and control administrator authority based thereon.

[0016] In addition, the PLC storage unit or the second data storage unit may be configured as a WORM (Write Once Read Many) memory.

[0017] In addition, the data stored in the second data storage unit, which is encrypted by the second data storage encryption module, and the data stored in the PLC storage unit can be configured to compare their identity at predetermined intervals.

[0018] Here, the data encrypted by the second data storage encryption module and stored in the second data storage unit and the data stored in the data storage unit may be configured to compare their identity at predetermined intervals.

[0019] Preferably, identification information is assigned to the PLC unit, and an authentication key can be set between the PLC unit and the management server unit.

[0020] In addition, the management server unit may be configured to verify the authenticity of the digital signature unit at predetermined intervals. Effects of the invention

[0021] According to the present invention, security can be enhanced in the transmission of measurement data between the PLC unit and the management server unit included in the instrumentation control system.

[0022] In addition, the security of the data stored in the above instrumentation control system is enhanced, thereby preventing data alteration caused by external hacking.

[0023] In addition, enhanced security can be monitored and maintained. Brief explanation of the drawing

[0024] The attached drawings below are intended to facilitate understanding of the technical concept of the present invention in conjunction with the detailed description of the invention; therefore, the present invention should not be interpreted as being limited to the matters illustrated in the drawings below. FIG. 1 is a configuration diagram of a data security enhanced instrumentation control system according to the present invention, and FIG. 2 is a configuration diagram of a data security enhanced instrumentation control system according to another embodiment of the present invention. Specific details for implementing the invention

[0025] Hereinafter, the configuration of the present invention will be described in detail with reference to the attached drawings.

[0026] Prior to this, the terms used in this specification and claims shall not be interpreted as being limited to their dictionary meanings; rather, based on the principle that the inventor may appropriately define the concepts of the terms to best describe their invention, they shall be interpreted in a meaning and concept consistent with the technical spirit of the invention.

[0027] Therefore, it should be understood that the embodiments described in this specification and the configurations illustrated in the drawings are merely preferred embodiments of the present invention and do not represent all of the technical ideas of the present invention, and that various equivalents and modifications that can replace them may exist at the time of filing this application.

[0028] FIG. 1 is a configuration diagram of a data security enhanced instrumentation control system according to the present invention, and FIG. 2 is a configuration diagram of a data security enhanced instrumentation control system according to another embodiment of the present invention.

[0030] Referring to FIG. 1, the data security enhanced instrumentation control system according to the present invention comprises a data measurement unit (10) that is placed in a measurement target facility and generates measurement data from the facility, a PLC unit (20) that receives data from the data measurement unit (10) and generates a control signal, a management server unit (30) configured to communicate with the PLC unit (20), a data storage unit (40) for storing data transmitted from the data measurement unit (10), and a manager interface unit (50) connected to the management server unit (30) for inputting and outputting information. The PLC unit (20) includes a PLC storage unit (22) for storing data, and a data encryption module (60) is connected to the data measurement unit (10) so that the measurement data transmitted from the data measurement unit (10) is encrypted by the data encryption module (60) and transmitted to the PLC unit (20).

[0031] The instrumentation control system according to the present invention can be used, for example, in water supply or sewage treatment facilities, transmission / distribution facilities, or power management facilities.

[0032] The above data measurement unit (10) is configured to be placed in various facilities included in the above-mentioned water and sewage treatment facilities, etc., and to generate measurement data from the facilities.

[0033] The above measurement data may be, for example, data such as temperature, pressure, and flow rate, and the data measurement unit (10) may be configured to include various sensors placed in various devices such as pumps, motors, pipes, and valves included in the above various equipment.

[0034] The PLC unit (20) receives data such as temperature, pressure, and flow rate from the data measurement unit (10) and generates control signals for various devices included in the equipment.

[0035] The above PLC unit (20) can be configured in multiple units and distributed according to the type of equipment to be measured or the installation site.

[0036] For data transmission between the above data measurement unit (10) and the PLC unit (20), wired analog / digital communication methods such as RS-485 or 4-20 mA standards, or wireless communication methods such as LoRa, Zigbee, and Wi-Fi may be used.

[0037] The above PLC unit (20) is configured so that the above management server unit (30) is connected to each other via wired or wireless communication.

[0038] The above PLC unit (20) and the above management server unit (30) can be connected by, for example, wired or wireless internet communication, Ethernet, or communication methods such as MQTT, Modbus / TCP, OPC UA.

[0039] The data transmitted from the data measurement unit (10) is stored in the data storage unit (40).

[0040] The data storage unit (40) may be configured as a designated area for data storage in the management server unit (30), or it may be configured as a data storage device separate from the management server unit (30).

[0041] The above management server unit (30) is configured to have a manager interface unit (50) connected to it to input and output information.

[0042] The above administrator interface unit (50) may be configured to include a monitor for displaying information and a personal computer for inputting and outputting information.

[0043] And, the above PLC unit (20) is configured to include a PLC storage unit (22) for storing data.

[0044] Preferably, the PLC storage unit (22) may be composed of a memory component so as to be able to store data transmitted from the data measurement unit (10) within the PLC unit (20) which is placed at the site where the equipment to be measured is located.

[0045] In the instrumentation control system according to the present invention, a data encryption module (60) is connected to the data measurement unit (10).

[0046] The above data encryption module (60) is a module that encrypts data measured by the data measurement unit (10) placed in the equipment to be measured.

[0047] In the instrumentation control system according to the present invention, the measurement data transmitted from the data measurement unit (10) is encrypted by the data encryption module (60) and transmitted to the PLC unit (20).

[0048] The data transmitted to the above PLC unit (20) is stored in the above PLC storage unit (22).

[0049] Thus, as described above, all measurement data transmitted to the PLC unit (20) through the data encryption module (60) is encrypted and transmitted, thereby ensuring the confidentiality of the data.

[0050] In addition, the PLC unit (20) may include a decryption module for decrypting measurement data that is encrypted and transmitted as described above.

[0051] In addition, the PLC unit (20) is configured to decrypt the received encrypted data through the decryption module to ensure the confidentiality of the data and to utilize it for generating control signals.

[0052] Preferably, as in another embodiment of the present invention illustrated in FIG. 2, the PLC unit (20) is configured to include a PLC data encryption module (24).

[0053] In addition, data transmitted from the PLC unit (20) to the management server unit (30) can be configured to be encrypted by the PLC data encryption module (24) and transmitted.

[0054] The above PLC data encryption module (24) is a module that encrypts data transmitted from the above PLC unit (20) to the above management server unit (30) and generates a hash function value.

[0055] A hash function or hash algorithm is a function that maps data of arbitrary length to data of fixed length, and the value obtained by said hash function is called the hash function value.

[0056] The above hash function is widely used in computer software for very fast data retrieval. While conventional encryption algorithms use keys, this hash function does not use keys, so the same input always produces the same output.

[0057] The above hash function is used to provide integrity capable of detecting errors or tampering with the message.

[0058] Data transmitted from the PLC unit (20) to the management server unit (30) can be encrypted by the PLC data encryption module (24) and configured so that the hash function value of the data is transmitted together.

[0059] The data transmitted in an encrypted manner as described above is stored in the data storage unit (40).

[0060] Additionally, the management server unit (30) may include a decryption module for decrypting data transmitted from the PLC unit (20) in an encrypted manner.

[0061] In addition, when data is transmitted from the PLC unit (20) to the management server unit (30), the hash function value of the data may be transmitted together.

[0062] As described above, the hash function value of the data transmitted to the management server unit (30) can be stored in the data storage unit (40).

[0063] In addition, the management server unit (30) is configured to decrypt the encrypted data received through the decryption module and use it to form a control signal, and at the same time, verify the encrypted data stored in the data storage unit (40) and its hash function value to ensure the confidentiality and integrity of the data.

[0064] Preferably, it may include a second data storage unit (70) for storing data transmitted from the data measurement unit (10) in parallel.

[0065] In addition, the second data storage unit (70) may be configured to include a second data storage encryption module (72).

[0066] And, the data transmitted to the second data storage unit (70) can be configured to be encrypted and stored by the second data storage encryption module (74).

[0067] Thus, various measurement data transmitted from the PLC unit (20) are encrypted. It can be stored in parallel in the second data storage unit (70) above.

[0068] And, if necessary, the encrypted data stored in parallel in the second data storage unit (70) is configured to be decrypted and used.

[0069] At this time, the history of data storage in the second data storage unit (70), the identification information of the data measurement unit (1, 2, ...n) to which the data was first transmitted, the identification information of the PLC unit (20), etc., are the above It can be configured to be displayed through the administrator interface section (50).

[0070] Thus, it is configured so that an administrator can clearly monitor and manage the situation in which data is stored in parallel in the data storage unit (40) and the second data storage unit (70).

[0071] Preferably, one or more of the PLC storage unit (22) or the second data storage unit (70) may be configured as WORM (Write Once Read Many) memory.

[0072] The above WORM memory is a memory that cannot be changed or deleted once data is written, and can fundamentally prevent tampering with stored data.

[0073] By using the above WORM memory, the integrity of long-term preserved data is guaranteed, and preparations for legal evidence preservation or audits can be made.

[0074] By configuring the PLC storage unit (22) or the second data storage unit (70) as WORM memory, the security of data transmission and reception communication is prevented, and the various programs and stored data for controlling the PLC unit (20) are prevented, thereby preventing an external attacker from bypassing the communication channel and manipulating the program.

[0075] In addition, the data stored in the second data storage unit (70) that is encrypted by the second data storage encryption module (72) and the data stored in the PLC storage unit (22) can be configured so that their identity is compared at predetermined intervals.

[0076] Thus, the second data storage unit (70) is configured to be protected by a firewall with very high security, and the data stored in the PLC storage unit (22), which may be relatively vulnerable to security breaches, is compared for identity at predetermined intervals to monitor for hacking or data alteration.

[0077] In addition, data that is encrypted by the second data storage encryption module (72) and stored in the second data storage unit (70) can be configured to be compared for identity with data stored in the data storage unit (40) at predetermined intervals.

[0078] Thus, in addition to comparing the data stored in the second data storage unit (70) which is encrypted by the second data storage encryption module (72) with the data stored in the PLC storage unit (22), the data stored in the data storage unit (40) is also configured to be identical, thereby enabling the firewall to be configured economically and efficiently to improve data security performance and monitor hacking or data alteration situations.

[0079] Meanwhile, preferably, the management server unit (30) is provided with a digital signature unit for determining whether it is a genuine administrator, and the PLC unit (20) receives digital signature-based administrator authentication information from the management server unit and controls administrator authority based thereon.

[0080] The above true manager refers to a person who has management authority over the above PLC unit (20) and can be designated by an instrumentation control system operator according to the present invention.

[0081] The above digital signature unit can be configured to verify, for example, whether it has genuine administrative authority by entering a password.

[0082] As described above, by providing a digital signature unit in the management server unit (30) to determine whether the person is a genuine administrator and to allow access, the PLC storage unit (22) is configured to be configured as a WORM memory to prevent data tampering, thereby further enhancing security.

[0083] Additionally, identification information is assigned to the PLC unit (20) which can be placed in multiple locations, and an authentication key can be set between the PLC unit (20) and the management server unit (30).

[0084] That is, the PLC unit (20) and the management server unit (30) are configured to block the connection of unauthorized devices by possessing a pre-designated and pre-shared authentication key and performing mutual authentication when a communication connection is established.

[0085] As a method for sharing an authentication key between the management server unit (30) and the PLC unit (20), the management server unit (30) and the PLC unit (20) first share an authentication key during the initial system setup, and when the management server unit (30) requests a communication connection to the PLC unit (20), the PLC unit (20) transmits the hash function value of the authentication key to the management server unit (30).

[0086] In addition, when the management server unit (30) receives the hash function value of the authentication key, it may be configured to transmit the response packet included in the authentication key to the PLC unit (20).

[0087] And, when the validity of the above hash function value and response packet is verified, a communication channel between the PLC unit (20) and the management server unit (30) can be established.

[0088] In addition, the management server unit (30) may be configured to verify the authenticity of the digital signature unit at predetermined intervals.

[0089] That is, it is configured to verify whether the password, etc. included in the digital signature unit is a genuine password at predetermined intervals.

[0090] Thus, it is configured to monitor the situation of tampering with the digital signature register due to hacking.

[0092] For the above, the terms used in the embodiments of the present invention have the same meaning as generally understood by those skilled in the art to which the present invention pertains.

[0093] Although the present invention has been described by limited embodiments and drawings, the above embodiments are intended to explain, not to limit, the technical concept of the present invention, and therefore the technical concept of the present invention is not limited to these, and various modifications and variations may be made by a person skilled in the art within the scope of the technical concept of the present invention and the equivalent scope of the following claims.

[0094] Accordingly, the scope of protection of the present invention shall be interpreted by the claims, and all technical ideas within an equivalent scope shall be interpreted as being included within the scope of rights of the present invention.

[0095] In addition, within the scope of the purpose of the present invention, one or more of the components may be optionally combined.

[0096] The terms "included" or "composed" mentioned above mean that the relevant component may be included, and should be interpreted as meaning that other components may additionally be included. Explanation of the symbols

[0097] 10: Data Measurement Department 20: PLC section 30: Management Server Section 40: Data storage unit 50: Administrator Interface Section 60: Data encryption module 70: Second data storage unit

Claims

Claim 1 The apparatus comprises: a data measurement unit deployed on equipment to be measured and generating measurement data from said equipment; a PLC unit that receives data from said data measurement unit and generates a control signal; a management server unit configured to communicate with said PLC unit; a data storage unit for storing data transmitted from said data measurement unit; and a manager interface unit connected to said management server unit for inputting and outputting information, wherein the PLC unit includes a PLC storage unit for storing data, and a data encryption module is connected to said data measurement unit so that measurement data transmitted from said data measurement unit is encrypted by said data encryption module, transmitted to said PLC unit, and stored in said PLC storage unit, and wherein the apparatus comprises a second data storage unit for storing data transmitted from said data measurement unit in parallel, wherein the PLC unit includes a PLC data encryption module, and data transmitted from said PLC unit to said management server unit is configured to be encrypted by said PLC data encryption module and transmitted, and the second data storage unit includes a second data storage encryption module, and the second Data transmitted to the data storage unit is configured to be encrypted and stored by the second data storage encryption module, and the hash function value of the data is transmitted from the PLC unit to the management server unit along with the data encrypted by the PLC data encryption module, and the management server unit is configured to decrypt the received encrypted data through a decryption module to form a control signal and to compare the decrypted data with the hash function value, and the PLC storage unit is configured as a WORM (Write Once Read Many) memory, and the data encrypted by the second data storage encryption module and stored in the second data storage unit and the data stored in the PLC storage unit are configured to be compared for identity at predetermined intervals.Data encrypted by the second data storage encryption module and stored in the second data storage unit and data stored in the data storage unit are configured to compare their identity at predetermined intervals; identification information is assigned to the PLC unit; an authentication key is set between the PLC unit and the management server unit; when the management server unit requests a communication connection to the PLC unit, the PLC unit transmits the hash function value of the authentication key to the management server unit; and when the management server unit receives the hash function value of the authentication key, it transmits a response packet included in the authentication key to the PLC unit, and when the validity of the hash function value and the response packet is verified, a communication channel is established between the PLC unit and the management server unit, characterized by a data security enhanced instrumentation control system. Claim 2 A data security enhanced instrumentation control system according to claim 1, wherein the management server unit is provided with a digital signature unit for authenticating whether the user is an administrator, and the PLC unit receives digital signature-based administrator authentication information from the management server unit and controls administrator authority based thereon. Claim 3 A data security enhanced instrumentation control system according to claim 1, characterized in that the second data storage unit is composed of WORM (Write Once Read Many) memory. Claim 4 A data security enhanced instrumentation control system according to claim 2, characterized in that the management server unit is configured to verify the authenticity of the digital signature unit at predetermined intervals. Claim 5 delete Claim 6 delete Claim 7 delete Claim 8 delete Claim 9 delete Claim 10 delete Claim 11 delete

Images