656 results about "Modbus" patented technology

The invention relates to the technical field of data processing, in particular to a building light storage and charging integrated energy management system, which is used for solving the problems of data processing delay and resource coordination mismatch caused by insufficient multi-source heterogeneous data fusion in photovoltaic power generation, energy storage and grid connection links. The system comprises a data acquisition module, a protocol conversion module, a data fusion module, a scheduling optimization module, an instruction generation module and a feedback module. The protocol conversion module carries out Modbus, CAN bus and IEC 61850 protocol analysis on the photovoltaic output time sequence data, the energy storage charging and discharging state data and the power grid dispatching instruction to generate standardized data streams. And the safety verification module intercepts the overrun instruction and triggers an amplitude limiting strategy. Through protocol unification, dynamic fusion and closed-loop control, the system realizes improvement of photovoltaic consumption rate, reduction of energy storage circulation loss and optimization of power grid frequency modulation deviation, and significantly improves the efficiency and economy of light storage and charging cooperative operation.

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

The invention relates to the technical field of industrial automation, and discloses a method for detecting abnormal operation of industrial control equipment based on industrial control protocol analysis, which comprises the following steps of: 1, acquiring operation data of the industrial control equipment through at least one industrial control protocol which is a Modbus protocol, an OPC UA protocol or a PROFIBUS protocol, the operation data comprises sensor data, register data and equipment state data of the equipment; and 2, analyzing the collected data packet by using a protocol analyzer, extracting key information related to the equipment operation state, the key information comprising parameters such as equipment working frequency, load, vibration, temperature and pressure, and converting the key information into a uniform data format. By collecting, analyzing and analyzing the operation data of the industrial control equipment in real time, abnormal conditions in operation of the equipment can be found in time, spreading of equipment faults is avoided, and stable operation of the equipment is guaranteed.

The invention discloses a new-generation medical equipment integration engine, which comprises an equipment data standardization module used for automatically identifying and converting various equipment data formats; the equipment data standardization module can process various medical equipment data such as HL7, DICOM and MODBUS through a built-in multi-protocol analyzer and convert the medical equipment data into a uniform standard format, so that the consistency and interoperability of the data are ensured; the real-time data processing engine module is used for collecting, transmitting and processing the data of the medical equipment in real time; the intelligent analysis and decision support module is used for performing intelligent analysis on the data from the medical equipment through deep learning and time sequence analysis technologies; a micro-service architecture design module; and a multi-level security mechanism module. The device data can be deeply analyzed and predicted, the accuracy of diagnosis and treatment decisions can be improved, early warning can be achieved, and the safety of patients is ensured.

The invention relates to the technical field of data acquisition, in particular to a multi-source heterogeneous bus data acquisition protocol configuration method, which realizes protocol identification and structure analysis of CAN (Controller Area Network), Modbus and Ethernet / IP (Internet Protocol) bus data by dynamically compiling protocol source codes and registering analysis classes, and comprises the following steps of: extracting protocol feature information from a data stream; the method comprises the following steps of: calling a corresponding protocol analysis class to perform recursive analysis, and executing parameter analysis and mapping, in addition, defining a new protocol semantic feature and dynamically generating a protocol analysis plug-in through an XML (Extensible Markup Language) configuration file to realize protocol semantic-level custom extension, adopting source code level dynamic compilation and plug-in design, supporting a new protocol plug-and-play mode, and being high in practicability. System codes do not need to be modified and redeployed, and the flexibility and expandability of the system are effectively improved.

The invention relates to the technical field of equipment fault intelligent diagnosis, in particular to an equipment fault intelligent diagnosis method and system based on a Modbus protocol. The method comprises the following steps: acquiring real-time operation data from target industrial equipment through a Modbus protocol, dynamically adjusting an initial sampling frequency based on an equipment operation state, and performing multiple verification and compensation correction on the acquired data to obtain a stable data stream; performing multi-scale decomposition and feature enhancement processing on the stable data stream, extracting a time-frequency domain mixed feature set, and constructing a feature evolution trajectory; inputting the feature evolution trajectory into a double-branch diagnosis model integrating equipment state prediction and fault classification, and outputting an equipment health degree score and fault type probability distribution; and constructing a dynamic fault threshold curved surface, carrying out multi-dimensional fusion decision by combining the equipment health degree score and the fault type probability distribution, and generating a graded fault early warning and maintenance strategy. According to the invention, the accuracy, timeliness and adaptability of industrial equipment fault diagnosis can be greatly improved.

The invention discloses a secure communication method and system based on a national cryptographic algorithm and an improved Modbus TCP protocol. The secure communication method comprises the steps that a host and a slave share an initial public key; the host and the slave establish TCP connection and generate random numbers based on the password module; signature verification is carried out on the random number by adopting a national cryptographic algorithm, so that security identity authentication between the host and the slave is realized; negotiating an encryption key between the host and the slave based on a national cryptographic algorithm; and the host and the slave perform data transmission based on the encryption key. According to the invention, a standard Modbus TCP protocol is improved, a security check domain is added so as to realize replay attack prevention, the SM2 asymmetric algorithm and the SM4 symmetric algorithm are combined to expand the national secret protocol design so as to ensure the confidentiality of data, and by configuring the cryptographic module for national secret authentication, the security of the Modbus TCP protocol is improved. And the functions of cryptographic operation, key generation, random number generation and the like of the host / slave are supported. Therefore, the safety compliance communication of the industrial system based on the improved Modubs TCP protocol is realized.

The invention relates to a production abnormality automatic identification and recovery process control method, which comprises the following steps of S1, realizing second-level synchronization of multi-source heterogeneous data, constructing a real-time data flow pipeline and generating a total-factor production situation data flow through a distributed message queue by adopting a Modbus / TCP protocol analysis algorithm based on industrial Internet of Things edge calculation; through the cooperative effect of industrial protocol analysis and distributed message queues, second-level synchronization of multi-source heterogeneous data is realized, a real-time data flow pipeline is constructed, data acquisition delay is effectively eliminated, the timeliness of anomaly detection is ensured, a dynamic weight distribution mechanism of a rule engine and a long and short-term memory network prediction model is adopted, and the real-time performance of the system is improved. By combining sliding window threshold detection, the accuracy and coverage of anomaly recognition are improved, false alarm and missing alarm caused by a single detection mechanism are reduced, and multi-dimensional root cause tracing is performed by combining a fault mode knowledge base through combined application of time sequence correlation analysis and a causal diagram inference engine.

The invention discloses an industrial database protection method based on multi-modal authentication and encryption, which belongs to the technical field of data processing and comprises the following steps: acquiring input data to be input into an industrial database; a multi-mode authentication gateway is adopted to verify user identity information, and a biological feature, a dynamic device fingerprint and a quantum random number token are fused to generate a third-level identity verification identifier; after the three-level identity verification is passed, determining an encryption algorithm according to the sensitive level of the industrial data transmitted in real time and the system load state, and encrypting the industrial data through the encryption algorithm; and for the encrypted industrial data, analyzing the function code of the Modbus message of the industrial data transmitted in real time, establishing a white list instruction set, and intercepting the industrial data of the function code which is not in the white list instruction set. According to the industrial database protection method based on multi-modal authentication and encryption, the problem of how to improve the real-time response capability of a system on the premise of ensuring the security of industrial data is solved.

The invention discloses a software and hardware combined data interaction method and system based on a Modbus communication component. According to the method and the system, different types of Modbus slave devices are managed through a unified communication configuration file and a point table configuration file, so that compatible access to heterogeneous devices is realized; through an optimized point table analysis mechanism, efficient and self-adaptive data acquisition of discontinuous register addresses is supported, and fine processing and conversion are performed on different data types; a graphical configuration management tool is provided, and the equipment configuration and point table management process is simplified; and a standardized command model is used, so that unified control and data interaction of an upper-layer application on Modbus equipment are facilitated. According to the invention, the flexibility, usability and data interaction efficiency of Modbus communication can be remarkably improved, the system integration and operation and maintenance cost is reduced, and an efficient and reliable Modbus communication solution is provided for the field of industrial automation.

The invention provides a controllable SCADA (supervisory control and data acquisition) industrial production control platform based on an industrial internet architecture. The controllable SCADA industrial production control platform comprises a field layer, an edge layer, a communication layer, a cloud / fog computing layer and a data management layer, wherein the field layer is composed of a sensor array, an execution mechanism, a PLC controller and an RTU terminal; the sensor array comprises a temperature sensor, a pressure sensor, a flow sensor and a position sensor, and adopts 4-20mA current loop signal output; the execution mechanism comprises an electric valve, a servo motor and a variable frequency driver, and communicates with the PLC through a Modbus RTU protocol; the PLC controller is provided with a dual-core processor and is provided with 16 digital quantity input / output channels and 8 analog quantity input channels; the RTU terminal is internally provided with a LoRa wireless communication module; the edge layer comprises an edge computing node and a protocol conversion gateway; the edge computing node is provided with an FPGA coprocessor and supports an edge reasoning framework; and multi-protocol conversion is realized through the protocol conversion gateway.

The invention discloses a photovoltaic inverter data monitoring plug-and-play method, and the method comprises the steps: constructing a model list supported by a model conversion program for various inverter brands; the initialization information of the acquisition terminal is configured, so that the acquisition terminal can correctly read the type ID and firmware version information of the inverter; establishing a mapping relation between the model ID and the Modbus protocol, wherein the mapping relation at least comprises a register address, a field type, a byte length, a unit and an alarm and state ID description corresponding to a standard object model field; the acquisition terminal reads the type ID and firmware version information of the inverter, and dynamically constructs a Modbus protocol frame according to a physical model demand field after verification of the support of the model library; and after the fields required by the object model are collected, assembling the object model into a Json structure model with a unified standard, and sending the Json structure model to a cloud for analysis and display. The cloud has the capability of remotely updating firmware, the timeliness and accuracy of the system are ensured, user feedback and technical support requests can be collected, and a model conversion program can be continuously optimized and improved.

The invention discloses a configurable multi-slave-station frequency conversion communication system based on Modbus communication. The configurable multi-slave-station frequency conversion communication system comprises an upper computer, a Modbus communication module and a lower computer, wherein the upper computer communicates with the lower computer through the Modbus communication module, and the upper computer constructs and sends a command frame to the lower computer according to a Modbus communication protocol specification; after receiving the command frame of the upper computer, the lower computer analyzes the command frame, executes corresponding operation according to a command frame analysis result, encapsulates a response frame and returns the response frame to the upper computer; and after receiving the response frame of the lower computer, the upper computer analyzes the response frame to analyze the required data. Compared with the prior art, the system disclosed by the invention has the advantages of high flexibility, high reliability, resource saving, high efficiency, easy expansion, high data transmission speed, high expandability and the like.

The invention belongs to the technical field of information interaction, and relates to a device information interaction method, a slave device gateway and a master device. An active frame transmission mechanism is realized through the slave device gateway, so that the slave device actively reports information to the master device when the state changes or the trigger condition is met, and the master device can analyze and issue a configuration instruction in real time to complete dynamic management of the slave device. The method supports centralized monitoring and configuration of slave devices in the parallel operation energy storage system, ensures the consistency of device identifiers, addresses, groups and states, realizes real-time, accurate and extensible management, does not interfere with the original Modbus master-slave communication process, and effectively solves the problems of poor expansibility, state update lagging, communication conflict risk and the like in the traditional one-master one-slave mode.

The invention discloses a protocol conversion and protocol self-learning method and system for transformer area optical storage and charging cooperation, and the method comprises the steps: constructing a digital twinborn body of a transformer area optical storage and charging system, carrying out the parallel operation of a protocol agent and a protocol agent in a virtual environment, and achieving the cooperative training of the protocol agent and the protocol agent through a hierarchical reinforcement learning architecture, the protocol agent is responsible for learning a dynamic priority scheduling and compression strategy for heterogeneous protocol messages such as Modbus, CAN and IEC 104, the protocol agent is responsible for learning a power balance and voltage stability control strategy based on photovoltaic output, energy storage SOC and charging load, and the two agents realize cross-domain collaborative optimization through a reward function mutual coupling mechanism. And finally, safely deploying the collaborative strategy obtained by training to the edge control equipment of the physical transformer area. According to the method, the problems of disjunction of protocol conversion and cooperative control, protocol strategy solidification, insufficient cross-domain cooperation and the like in the prior art are solved, and the operation efficiency and the self-adaptive capability of the transformer area optical storage and charging system are improved.

The invention discloses an industrial channel test method and system based on a serial port communication protocol, relates to the field of industrial control, and aims to solve the problems that an existing channel test system is single in connection mode, complex in deployment and low in efficiency due to dependence on manpower. According to the invention, the deployment process is simplified by supporting dual-protocol adaptive switching between an RTU mode (direct connection through a 485-to-USB converter) and a TCP / IP mode (wired / wireless network access); driving test logic by using a spreadsheet, pre-defining a Modbus address, a measuring range and a precision threshold value, automatically generating an instruction and acquiring data; and the integrated voice broadcast module feeds back a test result in real time, and prompts an abnormal channel and a processing suggestion when the precision exceeds the limit, so that single-person closed-loop operation is realized. The test result is automatically recorded to the spreadsheet, a structured report is generated, historical tracing and cross-platform data integration are supported, the test efficiency and reliability are remarkably improved, and the method is suitable for high-frequency channel verification of the industrial control system.

The invention discloses a multi-mode intelligent tension self-adaptive control method, and belongs to the technical field of tension control of wire rod processing devices. According to the method, an LSTM-Transform hybrid model is utilized to realize the collaborative optimization control of tension prediction, the rotating speed and the pitch; by means of an edge computing architecture and a Modbus-TCP real-time communication protocol, a data processing and control instruction generation period is compressed to be within 50ms, and the dynamic response capability of a system is improved; and meanwhile, a graded safety protection mechanism is designed, a robust control mode is switched to at a millisecond level when vibration energy exceeds a limit or the temperature is abnormal, and the MES system is linked to push a fault code, so that the control precision is remarkably improved, the material loss rate and the operation and maintenance complexity are reduced, and a high-reliability and self-adaptive intelligent solution is provided for high-speed wire rod processing equipment.

The invention discloses a multi-protocol hardware communication adaptation module based on an energy storage system and a configuration method, the module comprises a protocol template library, an intelligent mapping engine and a model generator, and the method comprises the following steps: storing structured protocol point location information through the protocol template library; an intelligent mapping engine is used for shielding the isomerism of Modbus, MQTT, IEC104 and other underlying protocols, and a unified data interface is provided; intelligent matching among different protocol terms is realized by adopting a natural language processing technology through a semantic level mapping unit; and finally, generating a target data model by a model generator through one key. The method effectively solves the problems that when the energy storage system integrates multi-manufacturer equipment, protocol configuration depends on manpower, efficiency is low, errors are prone to occurring, and expansibility is poor.

The invention discloses a Modbus master station control system for multi-queue task scheduling, and relates to the technical field of automatic control. A multi-queue task scheduling architecture is adopted, firstly, hierarchical classification is performed on Modbus communication tasks according to functional characteristics of the Modbus communication tasks, then different types of tasks are placed in independent task queues with different scheduling strategies, and finally, the tasks are scheduled by a task scheduling manager according to priorities and scheduling strategies of the queues. And in combination with an intelligent optimization mechanism based on historical communication performance data analysis, tasks are efficiently and orderly scheduled and executed, so that the communication efficiency of the Modbus network, the emergency task response speed and the overall reliability of the system are remarkably improved.

The invention discloses a pulsed neutron generator control system based on LabVIEW, and the system comprises a neutron generator industrial personal computer which operates a virtual human-computer interaction interface developed based on LabVIEW; the console core board carries a DSP main control chip and is embedded into a real-time operating system; the driving sampling board is connected with the console core board and is integrated with a signal conditioning circuit; the neutron generator industrial personal computer communicates with the console core board through a Modbus protocol, and controls and drives the sampling board to output control signals of the three independent power supply ion sources, the storage and the acceleration pole to the neutron tube; wherein the console core board generates three paths of PWM signals with the PWM frequency of 2.5 kHz and the step length of 8191, and the three paths of PWM signals are converted into analog control signals through the driving sampling board. According to the control system, the PWM control precision is greatly improved, the voltage control precision is improved to 0.012% (100% higher than that of a conventional scheme) through the combination of the 8191 step length (13-bit resolution) and the 2.5 kHz frequency, and the neutron yield fluctuation is controlled within + / -1.5%.

The invention discloses an intelligent power grid load prediction and dynamic response coordinated scheduling method, and relates to the technical field of power system automation, and the method comprises the steps: accessing intelligent ammeters, distributed power controllers and other devices of Modbus, IEC61850 and DL / T645 protocols through a multi-protocol adaptive gateway, and achieving data standardization; time stamps are calibrated by means of Beidou time service and an IEEE1588PTP protocol, and it is ensured that multi-source data synchronization errors are controllable; deploying an edge computing node cluster, distributing high-priority tasks to low-load nodes through an edge coordinator in combination with a load fluctuation level and a greedy algorithm, and ensuring real-time processing efficiency; the edge nodes generate short-term load prediction, and the cloud platform outputs medium and long-term prediction based on a historical data training model; and finally, the coordinated scheduling decision module fuses the two types of prediction results and the real-time parameters of the power grid, and generates a dynamic instruction to control the output of the adjustable load and the distributed power supply.

The invention discloses a Modbus protocol security enhancement method in a multicast communication scene, which comprises the following steps: when a master node initiates an identity authentication request, the master node calculates a first message authentication code of a first random number according to a session key; wherein the session key is obtained according to random numbers pre-generated by the master node and the slave node; broadcasting and sending the encrypted session key and the first message authentication code to each slave node; the slave node decrypts the encrypted session key, and calculates a second message authentication code of the first random number according to the obtained session key; when the message authentication codes are the same, authenticating the identity of the main node; the slave node calculates a third message authentication code of the second random number by using the session key, and sends the third message authentication code to the master node; the main node uses the session key to calculate and obtain a fourth message authentication code of each second random number; and when the message authentication codes are the same, authenticating the identity of the corresponding slave node. According to the invention, the identity verification efficiency is improved, and the safety and reliability are improved.

The invention relates to the technical field of industrial communication test, and discloses a master-slave station simulation test system and method based on an MODBUS communication protocol, and the system comprises a software authorization module which is used for verifying a registration file and starting test software; the engineering project management module is used for establishing a corresponding project in test software according to engineering requirements of a user and selecting a communication type; the user management module is used for establishing, modifying and deleting a user account; the environment configuration module is used for configuring communication environment parameters according to the communication protocol type; the communication management module is used for receiving, reading, caching and writing data; the variable management module is used for configuring variable parameters and performing master-slave station simulation test according to the communication point position table; the test trend management module is used for rendering and drawing a variable change trend chart by utilizing matplotlib, the master station and the slave station are simulated for testing, MODBUS TCP and MODBUS RTU communication protocols are supported, and the test efficiency is improved.

The invention relates to the technical field of gateway management, in particular to a Modbus gateway management system and method based on an active identification carrier, and the system comprises a priority field identification module, an instruction field association module, an authority state judgment module, an access judgment module and an exception classification module. According to the method, dynamic structured sorting is executed according to priorities, functional fields are dynamically coupled with instruction sequences according to a mapping relation, equipment authority is synchronously judged based on a validity period and an operation state label to realize packet switching, and a communication process is subjected to full-process identification according to an access state and a data association feature; identity consistency and response sequence differences in interaction events are automatically classified into exclusive abnormal tags, links of equipment access, permission change, communication judgment and abnormal collection are driven by real-time parameter linkage, attribute distinguishing and behavior judgment capabilities in a multi-equipment environment are improved, and the method is suitable for the multi-equipment environment. And full-process management of multi-dimensional identity recognition, dynamic permission allocation, communication judgment and abnormity tracing is supported.

The invention relates to the technical field of control systems, and particularly discloses a crushed material drying system and an operation method thereof, and the crushed material drying system comprises a data acquisition module, a multi-source data fusion module, a dynamic shunting decision module, a cooperative control module and a tail gas treatment optimization module. The data acquisition module acquires particle size distribution, moisture content, stacking density and dust concentration data of materials in real time through a laser scattering type particle size analyzer and a microwave moisture sensor, and transmits the data to the multi-source data fusion module through a Modbus protocol; according to the operation method, through an abnormal working condition grading alarm mechanism, a genetic algorithm optimization fuzzy rule base and multi-module data linkage, the problems of local overheating and low energy efficiency caused by parameter mismatch in traditional control are solved, and global optimization of drying efficiency, energy consumption and operation stability is achieved.

The invention discloses an online stress monitoring device and method based on Modbus-RTU stress sensing and digital communication, and the method comprises the steps: collecting original stress data and a multi-dimensional environment parameter sequence through stress sensing nodes, constructing an exclusive environment gene map, generating a dynamic compensation model, and carrying out the environment coupling decoupling and self-adaptive correction of the original data; a periodic self-diagnosis process is executed in the monitoring process, signal impedance characteristics and output signal stability are analyzed, and an equipment state fault code is generated and actively uploaded through a Modbus-RTU protocol when abnormity occurs; triggering a cooperative monitoring mechanism based on the corrected stress measurement value, controlling adjacent nodes to enter a high-frequency sampling mode and generating a stress propagation dynamic cloud; meanwhile, a node performance baseline is established, and a gain self-regeneration process is started when performance degradation is detected. Accurate compensation and dynamic correction of stress data are realized, and the environmental adaptability, the operation reliability and the fault early warning capability of a monitoring system are remarkably improved.

The invention discloses an automatic focusing control circuit and a control method, and relates to the field of automatic focusing. The circuit comprises a ZYNQ chip which comprises a programmable logic unit and is used for calculating the coordinates of the center of mass according to an image of an object to be measured; the first ARM core unit is used for calculating driver focusing control information according to the center-of-mass coordinates and sending the driver focusing control information to the programmable logic unit, so that the transmission efficiency among the units in the ZYNQ chip is improved; the driver is connected with the programmable logic unit and is used for acquiring focusing control information of the driver, so that the driver is used for adjusting the distance from the image sensor to the to-be-detected object, and the to-be-detected object is focused; the ZYNQ chip further comprises a second ARM core unit, and the second ARM core unit is connected with the upper computer through the serial port communication module. Wherein the serial port communication module is connected with the upper computer through a 485 chip and an RS-485 bus, and data transmission is based on a Modbus communication protocol.

The invention discloses a serial port data message queue processing method of gateway machine equipment and the gateway machine equipment, which adopt a Modbus protocol as a communication protocol, and store sensor data points with continuous register addresses, same read-write function codes and consistent four remote types in the same sensor into a processing data stack; the processing data heap is assembled into permanent Modbus message information; message processing instructions of the remote control information points or the remote regulation information points are assembled into temporary Modbus message information, and feedback information of the corresponding remote signaling information points and the corresponding remote measurement information points are also assembled into temporary Modbus message information; the Modbus message information is added into a Modbus message information processing queue of a serial port in a mode of combining regular traversal of a message storage pile and an upper computer instruction, and the serial port takes out the Modbus message information in the Modbus message information processing queue one by one for message processing. According to the method, the timeliness of temporary Modbus message information processing is considered while the permanent Modbus message information processing regularity is realized.

The invention discloses a PLC anomaly detection method and system based on a self-attention mechanism and an OCNN, and relates to the technical field of industrial automation control, and the method comprises the steps: collecting PLC operation data through a Modbus communication protocol, carrying out the standardization processing, constructing a time sequence sample, constructing a feature extraction network based on the self-attention mechanism, and carrying out the detection of the PLC anomaly. Generating a query matrix, a key matrix and a value matrix through three linear transformation layers to perform global feature extraction, further performing local feature extraction, designing an improved OCNN detector, splicing global and local features through a special fusion layer, introducing residual connection, and calculating an abnormal score through an abnormal boundary learning layer; joint optimization of a feature extraction network and a detector is realized, a multi-task loss function is designed, and a two-stage training strategy is adopted for optimization; and finally, online anomaly detection is executed, real-time data preprocessing and feature extraction are carried out, multi-level early warning judgment is carried out, and an early warning information report containing processing suggestions is generated in combination with space-time correlation analysis.

The invention provides a Modbus protocol security enhancement method and system in a unicast communication scene, and relates to the technical field of industrial control networks. Comprising the following steps: sharing a first ciphertext and a second ciphertext between a master node and a slave node; the master node generates a first message authentication code according to the second ciphertext, a preset key and the first random number, and sends the first message to the slave node by using the target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first ciphertext, the preset key and the second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first ciphertext, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second ciphertext, the preset key and the first random number. Therefore, the validity of the identities of the two communication parties can be ensured, and the integrity and confidentiality of the data in the transmission process are guaranteed.