Industrial Bus Deep Data Inspection via Three-Dimensional Address Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial internet field broadband buses face a hidden risk of security in data transmission due to inadequate address encoding and detection methods, which can lead to system breakdowns and compromised security.
Innovation Solution
A method for deep data inspection over industrial internet field broadband buses involves nodes connected via IP addresses, synchronized using a clock synchronization protocol, where messages are analyzed for bus device addresses within a preset range, and only valid messages are forwarded, with invalid messages discarded, utilizing a three-dimensional correspondence relationship between bus device addresses, MAC addresses, and IP addresses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional address encoding and detection methods are used in industrial internet field broadband buses, then device communication is simple and straightforward, but security vulnerabilities arise allowing virus information transmission and system breakdowns
Solution Approach 1:
The patent introduces a three-dimensional address verification mechanism that checks bus device addresses, MAC addresses, and IP addresses simultaneously across multiple dimensional layers. This multi-dimensional approach enhances security by validating messages from multiple address encoding perspectives rather than relying on a single address type, thereby blocking virus information transmission while maintaining systematic communication.
Solution Approach 2:
The patent implements preliminary address verification by checking whether bus device addresses fall within preset valid ranges before messages are fully processed or executed. This pre-validation mechanism prevents potentially harmful messages from entering the system, addressing security concerns before they can cause system breakdowns or unauthorized operations.
2Reliability
If one-to-one binding of MAC and IP addresses is implemented, then control accuracy is improved, but real-time transmission of bus information cannot be accommodated
Solution Approach 1:
The patent extends traditional one-to-one MAC and IP address binding by introducing bus device addresses as an additional dimensional layer. This three-dimensional address mapping enables the system to maintain precise control accuracy through multiple address verification while simultaneously supporting real-time bus information transmission by providing flexible address translation and routing capabilities across the additional dimension.
Solution Approach 2:
The patent creates a universal address verification mechanism that handles both precise one-to-one binding requirements and real-time bus information transmission needs through a unified three-dimensional address checking system. This multi-functional approach allows the same address verification infrastructure to serve both control accuracy and real-time transmission requirements without compromise.
3Reliability
If deep data inspection with three-dimensional address verification is implemented, then transmission security is enhanced, but processing time and computational load increase
Solution Approach 1:
The patent performs preliminary checks to determine whether bus device addresses fall within preset valid ranges before conducting full three-dimensional address verification. This staged approach allows quickly valid messages to pass through with minimal processing time while only subjecting suspicious or invalid addresses to the complete verification process, thereby reducing overall processing time while maintaining security.
Solution Approach 2:
The patent implements a layered verification strategy where not all messages undergo the complete three-dimensional address verification process. Instead, preliminary filtering identifies messages requiring full verification, applying the comprehensive security check only where necessary. This partial application of deep inspection maintains high security for critical messages while reducing computational overhead for routine communications.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
The invention discloses a method for deep data inspection over an industrial internet field broadband bus, the method including: obtaining, by a first node, a message to be transmitted; judging, by the first node, whether a bus device address in the message to be transmitted lies in a preset range of bus device addresses; and if the bus device address lies in the preset range of bus device addresses, then transmitting, by the first node, the message to be transmitted to a processor of the first node. The first node only forwards the message to be transmitted, lying in the preset range of bus device addresses to thereby improve the security of transmitting the message.