CN114979268B - Data transmission method, device, server and system for industrial gas enterprise - Google Patents
Data transmission method, device, server and system for industrial gas enterprise Download PDFInfo
- Publication number
- CN114979268B CN114979268B CN202210904679.1A CN202210904679A CN114979268B CN 114979268 B CN114979268 B CN 114979268B CN 202210904679 A CN202210904679 A CN 202210904679A CN 114979268 B CN114979268 B CN 114979268B
- Authority
- CN
- China
- Prior art keywords
- data
- server
- industrial
- briefing
- statistics
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0281—Proxies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Engineering & Computer Science (AREA)
- Computing Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Computer And Data Communications (AREA)
Abstract
The application is suitable for the technical field of industrial gas production, and provides a data transmission method, a device, a server and a system for an industrial gas enterprise, wherein the method is applied to a first server and comprises the following steps: determining a data type of device data from the industrial field device; if the data type is statistical type, sending the statistical type equipment data to a data processing server, wherein the data processing server and the first server are installed on the safety side of the industrial safety gateway; receiving a data statistics brief report fed back by the data processing server; and sending the data statistics briefing to a second server installed on the open side of the industrial safety gateway. By adopting the method, various data generated in the industrial gas production process of industrial gas enterprises can be safely processed, and the efficiency and reliability of data transmission are improved.
Description
Technical Field
The application belongs to the technical field of industrial gas production, and particularly relates to a data transmission method, device, server and system for industrial gas enterprises.
Background
In an industrial network, in order to ensure information security, a security gateway is generally installed between an internal system and an external system, and data transmission behavior is monitored through the security gateway. For example, in an industrial gas enterprise, data generated in the process of producing industrial gas inside the enterprise needs to be processed by an industrial safety gateway, and the data can be transited from the safety side of the gateway to the open side for use by an external system on the open side, so as to realize remote monitoring of the production process.
At present, the data transmission process based on the industrial security gatekeeper is uniformly received by an internal server at a security side, processed by the security gatekeeper, and then transmitted to an external server at an open side. The method can send all the data meeting the information safety requirement to the external server for processing, the transmitted data volume is large, and the workload of the external server is increased. When the external server communicates with a plurality of internal servers, for example, when the centralized control server of the industrial gas enterprise headquarters receives data transmitted by the distributed monitoring servers of a plurality of industrial gas production branch plants, it is easy to cause partial data reception failure due to an excessive workload of the external server.
Disclosure of Invention
In view of this, the present application provides a data transmission method, device, server and system for industrial gas enterprises, so as to improve the efficiency and reliability of data transmission.
A first aspect of the present application provides a data transmission method for an industrial gas enterprise, which is applied to a first server installed on a security side of an industrial security gateway for separating an internal system and an external system of the industrial gas enterprise, the method comprising:
determining a data type of device data from the industrial field device;
if the data type is statistical type, sending the statistical type equipment data to a data processing server, wherein the data processing server is installed on the safety side of the industrial safety gateway;
receiving a data statistics brief fed back by the data processing server, wherein the data statistics brief comprises comprehensive data obtained by summarizing and sorting multiple statistical type equipment data;
and sending the data statistics brief report to a second server installed at the open side of the industrial security gatekeeper.
A second aspect of the present application provides a data transmission method for an industrial gas enterprise, which is applied to a second server installed on an open side of an industrial safety gatekeeper used for separating an internal system and an external system of the industrial gas enterprise, the method comprising:
receiving message information forwarded through an open side of the industrial safety gateway, wherein the message information comprises information representing the format and the data content of the data statistics briefing in a tabular form;
recovering the data statistics briefing in the form according to the message information;
the data statistics briefing is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data are sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of the industrial safety gatekeeper.
A third aspect of the present application provides a data transmission apparatus for an industrial gas enterprise, applied to a first server installed on a security side of an industrial security gateway for separating an internal system from an external system of the industrial gas enterprise, the apparatus comprising:
a data type determination module for determining a data type of device data from the industrial field device;
the equipment data sending module is used for sending the statistical equipment data to a data processing server if the data type is statistical, and the data processing server is installed on the safety side of the industrial safety gatekeeper;
the data statistics briefing receiving module is used for receiving the data statistics briefing fed back by the data processing server, and the data statistics briefing comprises comprehensive data obtained by summarizing and sorting multiple statistical type equipment data;
and the data statistics briefing sending module is used for sending the data statistics briefing to a second server installed at the open side of the industrial safety gatekeeper.
A fourth aspect of the present application provides a data transmission device of industrial gas enterprise, is applied to the second server, the second server is installed in the open side of industrial safety gatekeeper, industrial safety gatekeeper is used for separating the internal system and the external system of industrial gas enterprise, the device includes:
the message information receiving module is used for receiving message information forwarded by the open side of the industrial safety gateway, wherein the message information comprises information representing the format and the data content of the data statistics briefing in the form of a table;
the data statistics briefing recovery module is used for recovering the data statistics briefing in the form according to the message information;
the data statistics briefing is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data are sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of the industrial safety gatekeeper.
A fifth aspect of the present application provides a server comprising a memory, a processor and a computer program stored in the memory and executable on the processor, the processor when executing the computer program implementing the data transmission method of the industrial gas enterprise as described in the first or second aspect.
A sixth aspect of the present application provides a computer readable storage medium storing a computer program which, when executed by a processor, implements the data transmission method of the industrial gas enterprise as described in the first or second aspect above.
A seventh aspect of the present application provides a computer program product which, when run on a computer device, causes the computer device to execute the data transmission method of the industrial gas enterprise described in the first or second aspect.
An eighth aspect of the present application provides a data transmission system, including a first server, a second server, and a data processing server, where the first server and the data processing server are installed on a secure side of an industrial security gatekeeper, and the second server is installed on an open side of the industrial security gatekeeper; the first server is used for realizing the data transmission method of the industrial gas enterprise according to the first aspect, and the second server is used for realizing the data transmission method of the industrial gas enterprise according to the second aspect.
Compared with the prior art, the method has the following advantages:
according to the embodiment of the application, the industrial safety gatekeeper is erected between the first server belonging to the internal system and the second server belonging to the external system, so that data transmission behaviors between the first server and the second server can be monitored. In addition, for the first server, the embodiment of the application is provided with a data processing server on the safety side of the industrial safety gatekeeper, and the data processing server is used for processing and storing the device data sent by the industrial field device. Specifically, when the first server receives the device data sent by the industrial field device, the data type of the device data is determined, and if the data type is statistical, the first server can send the statistical device data to the data processing server, and the data processing server collects and sorts the statistical brief report to obtain the statistical brief report and feeds the statistical brief report back to the first server. The first server may send the data statistics bulletin to the second server via the industrial security gatekeeper. In the embodiment of the application, the first server does not need to send all the device data of the industrial field device to the second server, but processes the device data in a targeted manner to generate the data statistics briefing. The data statistics briefing is comprehensive data obtained by summarizing and sorting multiple statistical type equipment data, is not original statistical type equipment data, and the data statistics briefing is sent to the second server, so that the data volume of data transmitted between the first server and the second server is greatly reduced. In addition, the embodiment of the application hands over the processing of the device data to the independent data processing server, so that the workload of the first server and the second server in processing the device data is reduced, and the efficiency and the reliability of data transmission are improved.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings used in the embodiments or the description of the prior art will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the application, and that for a person skilled in the art, other drawings can be derived from them without inventive effort.
Fig. 1 is a schematic diagram of a data transmission method of an industrial gas enterprise according to an embodiment of the present disclosure;
FIG. 2 is a schematic diagram of an industrial gas enterprise architecture provided by an embodiment of the present application;
FIG. 3 is a schematic diagram of a data transmission system of an industrial gas enterprise according to an embodiment of the present disclosure;
fig. 4 is a schematic diagram of an implementation manner of S104 in a data transmission method of an industrial gas enterprise according to an embodiment of the present application;
fig. 5 is a schematic diagram illustrating an implementation manner of S1042 in the data transmission method for an industrial gas enterprise according to an embodiment of the present application;
FIG. 6 is a schematic diagram of another data transmission method for an industrial gas enterprise according to an embodiment of the present application;
FIG. 7 is a schematic diagram of a data transmission device of an industrial gas enterprise according to an embodiment of the present disclosure;
FIG. 8 is a schematic diagram of another industrial gas enterprise data transmission device provided by an embodiment of the present application;
fig. 9 is a schematic diagram of a server according to an embodiment of the present application.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the present application. However, it will be apparent to one skilled in the art that the present application may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary detail.
The technical solution of the present application is explained below by specific examples.
Referring to fig. 1, a schematic diagram of a data transmission method for an industrial gas enterprise according to an embodiment of the present application is shown, which may specifically include the following steps:
s101, determining the data type of the device data from the industrial field device.
It should be noted that the method can be applied to the data transmission process of industrial gas enterprises in industrial gas production. The method is executed by a first server, and the first server can be installed on the safety side of an industrial safety gateway. That is, the present embodiment is an introduction of the data transmission method provided in the present application from the perspective of the first server.
In an embodiment of the present application, the industrial field device may be a device in a respective manufacturing branch or a respective manufacturing plant of an industrial gas enterprise. The equipment can generate corresponding equipment data in the operation process, and the production status of the industrial gas can be evaluated by acquiring, processing and analyzing the equipment data.
Fig. 2 is a schematic diagram of an industrial gas enterprise architecture according to an embodiment of the present disclosure. Typically, an industrial gas enterprise includes a plurality of production substations, such as production substations F1, F2, F3, … … Fn, and so on, shown in fig. 2; each production branch plant may further include a plurality of production plants, for example, the production branch plant F1 in fig. 2 includes production plants w1, w2, … … wn, and so on; in addition, as shown in fig. 2, the industrial gas enterprise further includes an enterprise headquarters, i.e. the enterprise headquarters G in fig. 2, for guiding the production branch plants and the production workshops thereof to cooperate with each other to jointly realize the production of the industrial gas.
In an embodiment of the present application, the first server may be a server capable of receiving device data of the industrial field device. For example, in an industrial gas enterprise equipped with a Distributed Control System (DCS), the first server may be a DCS server. The first server can monitor the running state of the industrial field devices in each production branch factory or each production workshop and receive the device data generated by each industrial field device.
In one example, each plant may be configured with a first server that monitors the operational status of all the industrial field devices in the plant. In this case, the device data received by the first server is the device data of all the devices in the production plant. In another example, a first server may be configured in each production substation, and the first server monitors the operating status of all industrial field devices in the substation. In this case, the device data received by the first server is the device data of all the devices in the branch plant. In a specific implementation, the number of the first servers to be configured may be determined according to the number of the industrial field devices included in each production plant or each branch plant or the data size of the device data generated by the industrial field devices. For example, in the first example, if one first server is configured for each production plant, a plurality of first servers need to be configured in an industrial gas enterprise or a certain production branch of the enterprise. In the second example, if each production branch is configured with a first server, only one first server needs to be configured in the industrial gas enterprise or a branch of the enterprise. The configuration mode and the number of the first servers are not limited in the embodiment of the present application.
In the embodiment of the application, the industrial safety gatekeeper can be a device capable of safely processing information or data generated by an internal system of an industrial gas enterprise. By installing the industrial security gateway, sensitive information or data can be prevented from being transmitted to an external system under the condition of unauthorized, and illegal data of the external system can be prevented from entering an internal network of an enterprise.
In this embodiment, when receiving device data sent by an industrial field device, a first server may first determine a data type of the device data. For example, the first server may determine whether the received device data is statistical or alarm type device data. The statistical device data may be data for evaluating and analyzing a production process of the industrial field device. Such as the frequency of plant operations, current production, etc. The alarm-type device data may be data that alerts or alarms on production conditions. For example, alarm information generated by an industrial field device when the frequency of operation of the device exceeds a safe value. In some cases, the alarm-type device data may be generated based on statistical-type device data, i.e., alarm information that is generated by the industrial field device itself based on a preliminary processing of the statistical-type device data.
And S102, if the data type is statistical, sending the statistical equipment data to a data processing server, wherein the data processing server is installed on the safety side of the industrial safety gateway.
In the prior art, a data transmission mode based on an industrial safety gateway can transmit all data meeting information safety requirements to an external second server. For example, as shown in FIG. 2, a large industrial gas enterprise may include multiple production substations, each of which may include multiple production plants. In order to monitor these different production substations and production workshops, a centralized control center may be configured at the headquarters G shown in fig. 2, so as to monitor all the industrial field devices in the production substations and production workshops. According to the processing method in the prior art, the device data generated by the industrial field devices in the production branch plants and the production workshops are collected to the centralized control center after being processed by the industrial safety gatekeeper, and are provided for the users in the external network after being processed by the centralized control center.
However, in actual practice, not all of the device data is necessary. Therefore, the embodiment of the application can perform targeted processing on the device data according to different data types. For example, the time efficiency is generally low for statistical type device data, which need not be transmitted in real time to a second server installed on the open side of the industrial security gatekeeper.
In this embodiment, each first server may be provided with a data processing server, and the data processing server may be configured to process, store, and the like the device data received by the first server. For statistical device data, the first server may send the device data to the data processing server, and the device data is processed and stored by the data processing server.
Fig. 3 is a schematic diagram of a data transmission system of an industrial gas enterprise according to an embodiment of the present invention, and the system shown in fig. 3 (a) includes a first server 301, a second server 302, a data processing server 303, and an industrial safety gateway 304. The first server 301 and the data processing server 303 are installed on the secure side of the industrial security gateway 304, and one first server 301 and one data processing server 303 are installed in a matching manner, for example, the data processing server 303 shown in (a) in fig. 3 is provided for the first server 301, and the first server 301 and the data processing server 303 may be configured in a certain production vehicle or production plant, for example, the production plants F1, F2, F3, … … Fn in fig. 2 or the production plants w1, w2, … … wn in each production plant in fig. 2, and both of them jointly implement processing of industrial gas production data in the production vehicle or production plant. The second server 302 shown in fig. 3 (a) is installed on the open side of the industrial security gateway, and can receive the data transmitted by the first server 301, and the second server 302 may be disposed in an industrial gas headquarters, for example, a headquarters G in fig. 2.
It should be noted that, fig. 3 (a) is a schematic diagram showing only one first server 301, one second server 302 and one data processing server 303 in the system, and the system shown in fig. 3 (a) can be used for data transmission of one production plant or one production branch plant. When the number of production plants or production substations is large, a plurality of first servers 301 and a plurality of data processing servers 303 may be configured based on the same architecture, forming a data transmission system as shown in (b) of fig. 3.
S103, receiving a data statistics brief report fed back by the data processing server, wherein the data statistics brief report comprises comprehensive data obtained by summarizing and sorting multiple statistical type equipment data.
In this embodiment of the application, the processing of the statistical device data by the data processing server may include summarizing and sorting the statistical device data to obtain a data statistics briefing. For example, the data processing server may perform summarization according to the device data of multiple devices in the production plant to obtain a data statistics briefing that may represent the actual production status in the production plant. The data statistics brief report can be in a table form, and the production condition of the production workshop can be recorded briefly through the table.
In this embodiment, the data statistics bulletin may include comprehensive data obtained by summarizing and sorting device data of various statistical types. These comprehensive data may reflect the overall condition of each industrial field device over a particular period of time, rather than the operating condition of the industrial field device at a particular time, as compared to the raw device data collected.
For the data statistics briefs obtained by summarizing and sorting, the data processing server can feed the data statistics briefs back to the first server.
And S104, sending the data statistics brief report to a second server installed at the open side of the industrial security gateway.
In the embodiment of the application, the data statistics briefing is obtained by collecting and sorting a large amount of equipment data, and can show the operation states of all the equipment as a whole. The first server installed on the secure side of the industrial security gatekeeper can send the data statistics briefing to the second server on the open side of the industrial security gatekeeper for further processing by the second server.
Since the data sent to the second server is a processed data statistics briefing, not all of the original device data, this greatly reduces the amount of data transferred between the first server and the second server. The processing of the equipment data is dispersed in each production workshop or each production branch factory, so that the workload of the second server for processing a large amount of equipment data is reduced, and the reliability of data transmission and equipment operation is improved.
In a possible implementation manner of the embodiment of the present application, as shown in fig. 4, sending the data statistics briefing to the second server installed on the open side of the industrial security gatekeeper in S104 specifically may include the following steps S1041 to S1042:
s1041, analyzing the data statistics briefing in the form of the table into message information, wherein the message information comprises information representing the format and the data content of the data statistics briefing.
S1042, sending the message information to the second server; and the second server is used for recovering the data statistics briefing in the form according to the message information.
In this embodiment of the present application, the data statistics briefing received by the first server may be in a table form, and for the data statistics briefing in the table form, the first server may parse the data statistics briefing into the message information. The message information may include information characterizing the format and data content of the data statistics briefing. For example, the title of the data statistics briefing, the position of each item and the specific data content are recorded in the form of messages.
The first server may send the message information to the second server, and the second server obtains the original data statistics briefing for the recovery according to the received message information.
According to the data transmission method and device, the data statistics briefing in the form of the table is analyzed into the message information, the data volume needing to be transmitted can be further reduced, and the data transmission efficiency is improved.
In a possible implementation manner of the embodiment of the present application, as shown in fig. 5, sending the message information to the second server in S1042 may specifically include the following steps S1421 to S1422:
s1421, determining a target uplink from the plurality of unidirectional uplink transmission links according to the link number, where the target uplink is a link from the first server to the second server through the industrial security gatekeeper.
In the embodiment of the present application, in order to improve the data transmission efficiency, a plurality of uplink unidirectional transmission links may be configured between the first server and the secure side of the industrial security gatekeeper, and between the open side of the industrial security gatekeeper and the second server, for transmitting data sent from the first server to the second server.
When the number of uplink unidirectional transmission links includes a plurality of uplink unidirectional transmission links, each uplink unidirectional transmission link may have a corresponding link number. When transmitting message information, the first server can determine a target uplink according to the link number, wherein the target uplink can be formed by links with the same link number between the first server and the safety side of the industrial safety gatekeeper and between the open side of the industrial safety gatekeeper and the second server, and the target uplink is the link from the first server to the second server through the industrial safety gatekeeper.
By determining the target uplink, the data to be transmitted can be ensured to use a fixed link, and the probability of confusion in the data transmission process is reduced as much as possible.
S1422, sending the message information to a security side of the industrial security gatekeeper through the target uplink, where the industrial security gatekeeper is configured to ferry the message information from the security side to the open side, so that the message information is transmitted to the second server through the target uplink.
In an actual transmission process, the first server can send the message information to a security side of the industrial security gateway through the target uplink, and the industrial security gateway performs security detection on the message information according to a set information security policy. If the detection result meets the corresponding information safety requirement, the industrial safety gateway can transfer the message information passing the safety detection from the safety side of the gateway to the opening side. The message information is then transmitted to the second server via the target uplink.
It should be noted that, after the second server receives the message information, the processing of the message information may include two ways. For example, the second server may process the message information by itself, thereby recovering the data statistics briefing. Or, the second server may not process the message information, but push the message information to the corresponding user terminal, and the user terminal recovers the data statistics briefing. For example, the message information may carry identification information for characterizing a data source, and the identification information may be identified to determine which production plant or which production branch plant the data statistics briefing corresponding to the message information is. In this way, the second server can directly push the message information to the user terminal which is provided with the function of receiving the data statistics briefing in the production workshop or the production branch factory, and the user terminal recovers the data statistics briefing so as to display the data statistics briefing to the corresponding user, wherein the user can be related staff or managers of the corresponding production workshop or the production branch factory.
In the embodiment of the application, after the related staff or manager refers to the data statistics briefing, if the related staff or manager wants to know more specific information of a certain data, the related staff or manager can operate on the user terminal to trigger a corresponding data operation instruction. The data operation command is transmitted to the second server first and then sent to the open side of the industrial safety gatekeeper by the second server.
Similarly, for data sent by an external system, the industrial security gatekeeper will perform corresponding security detection on the data. Therefore, the data operation command can be ferred to the safe side of the gatekeeper through the open side of the gatekeeper after being subjected to the safety detection. The first server can receive the data operation instruction forwarded by the security side of the industrial security gatekeeper.
In a possible implementation manner of the embodiment of the present application, at least one downlink unidirectional transmission link may be configured between the second server and the open side of the industrial security gatekeeper, and between the secure side of the industrial security gatekeeper and the first server, for transmitting data sent from the second server to the first server.
Similarly, when the number of the downstream unidirectional transmission links includes a plurality of downstream unidirectional transmission links, each downstream unidirectional transmission link may have a corresponding link number. When transmitting data such as a data operation command, the second server may determine a target downlink according to the link numbers, where the target downlink may be formed by links with the same link numbers between the second server and the open side of the industrial security gatekeeper and between the secure side of the industrial security gatekeeper and the first server, and the target downlink is a link from the second server to the first server through the industrial security gatekeeper.
In the embodiment of the present application, the first server itself does not store data. After receiving the data operation instruction, the first server may obtain target device data from the associated data processing server, where the target device data is device data that matches the received data operation instruction. Then, the first server may send the target device data to the second server, and the user device may receive the target device data through the relay of the second server. In this way, the user can refer to detailed device data on the user terminal.
Generally, the data volume of the target device data is large, and before the first server transmits the target device data to the second server, the first server may first compress the target device data into a data packet, and assign a corresponding check code to the data packet for subsequent checking by the second server.
In this embodiment, the first server may generate the check code according to the data statistics presentation. For example, a specific information summarization algorithm is adopted to process the data statistics briefing, a check code capable of uniquely identifying the data statistics briefing is obtained, and the check code is endowed to the compressed data packet.
After assigning the check code to the data packet, the first server may send the data packet carrying the check code to the second server. The second server may generate a decrypted key from the previously received data statistics briefs after receiving the data packet, and then verify the data packet using the key.
In this embodiment, the second server may check the data packet to check whether the received data packet matches with the previous data operation instruction. For example, the second server may process each currently stored data statistics briefing to generate the check code. And then, the data packet can be sent to the corresponding user terminal by confirming which check code is the same as the check code carried by the received data packet. In this process, the second server does not need to decompress and the like the compressed data packet. The subsequent decompression processing can be performed on the user terminal.
The above details the processing procedure of the first server for statistical type device data, and for alarm type device data, the processing procedure of the first server may be different.
Generally, the alarm-type device data is usually an alarm or an early warning for a certain fault that occurs or may occur, and in order to avoid the occurrence of the fault or to recover the normal operation state of the device as soon as possible, the alarm-type device data needs to be sent to the second server in time.
In the embodiment of the present application, in order to implement real-time transmission of alarm-type device data, a message queue may be configured on the open side of the industrial security gatekeeper, and the message queue may be constructed based on a high-throughput distributed publish-subscribe message system. For example, the message queue may be a Kafka message queue.
For alert type device data, the first server may send it to the message queue. The second server may subscribe to the message queue. In this way, when the alarm type device data exists in the message queue, the second server can consume the device data in time, so that the real-time forwarding of the alarm type device data is realized.
It should be noted that the uplink unidirectional transmission link between the first server and the security side of the industrial security gatekeeper for transmitting the alarm-type device data may be a fixed transmission link, and the transmission link is only used for transmitting the alarm-type device data. Therefore, confusion caused by sharing the transmission link between the alarm type equipment data and the statistic type equipment data can be avoided.
Referring to fig. 6, a schematic diagram of another data transmission method for an industrial gas enterprise provided in an embodiment of the present application is shown, which may specifically include the following steps:
s601, receiving message information forwarded through the open side of the industrial security gateway, wherein the message information comprises information representing the format and the data content of the data statistics briefing in the form of a table.
It should be noted that the method can be applied to a second server, which can be installed on the open side of the industrial security gatekeeper. That is, the present embodiment is an introduction of the data transmission method provided by the present application from the perspective of the second server.
In this embodiment, the message information received by the second server may be forwarded through the open side of the industrial security gatekeeper, and the message information may include information representing the format and data content of the data statistics briefing in the form of a table. The data statistics brief report is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data is sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of an industrial safety gateway.
For how the first server processes the statistical device data and sends the message information to the second server, refer to the description of the previous embodiment, and are not described herein again.
S602, according to the message information, recovering the data statistics briefing in the form of the table.
In this embodiment, the second server may recover the tabular data statistics briefing according to the received message information. The recovered data statistics briefing can be sent to the user terminal by the second server for relevant workers or managers of the corresponding production workshop or production branch factory to look up so as to realize remote monitoring of the industrial gas production process.
In a possible implementation manner, the second server may also push the message information to the corresponding user terminal without processing the message information, and the user terminal recovers the data statistics briefing. For how the user terminal recovers the data statistics briefing according to the message information that is not processed by the second server, refer to the description of the previous embodiment, and are not described herein again.
It should be noted that, the sequence numbers of the steps in the foregoing embodiments do not mean the execution sequence, and the execution sequence of each process should be determined by the function and the inherent logic of the process, and should not constitute any limitation on the implementation process of the embodiments of the present application.
Referring to fig. 7, a schematic diagram of a data transmission apparatus for an industrial gas enterprise according to an embodiment of the present application is shown, wherein the apparatus can be applied to a first server, and the first server can be installed in the security of an industrial security gateway, which is used for separating an internal system from an external system of the industrial gas enterprise. The apparatus may specifically include a data type determining module 701, an equipment data sending module 702, a data statistics briefing receiving module 703, and a data statistics briefing sending module 704, where:
a data type determination module 701 for determining a data type of device data from an industrial field device;
an equipment data sending module 702, configured to send the statistical equipment data to a data processing server if the data type is statistical, where the data processing server is installed on a security side of the industrial security gatekeeper;
a data statistics briefing receiving module 703, configured to receive a data statistics briefing fed back by the data processing server, where the data statistics briefing includes comprehensive data obtained by summarizing and sorting multiple statistical device data;
and a data statistics briefing sending module 704, configured to send the data statistics briefing to a second server installed on an open side of the industrial security gatekeeper.
In this embodiment of the present application, the data statistics brief is in a table form, and the data statistics brief sending module 704 may be specifically configured to: analyzing the data statistics briefing in the form of the table into message information, wherein the message information comprises information representing the format and the data content of the data statistics briefing; sending the message information to the second server; and the second server is used for recovering the data statistics briefing in the form according to the message information.
In this embodiment of the present application, a plurality of uplink unidirectional transmission links are configured between the first server and the secure side of the industrial security gatekeeper, and between the open side of the industrial security gatekeeper and the second server, and each of the plurality of uplink unidirectional transmission links has a link number; the data statistics briefing sending module 704 may be further configured to: determining a target uplink from a plurality of the uplink unidirectional transmission links according to the link number, the target uplink being a link of the first server to the second server via the industrial security gatekeeper; and sending the message information to a secure side of the industrial security gatekeeper through the target uplink, wherein the industrial security gatekeeper is used for ferrying the message information from the secure side to the open side so as to transmit the message information to the second server through the target uplink.
In this embodiment of the present application, the apparatus may further include a data operation instruction receiving module, a target device data obtaining module, and a target device data sending module; wherein:
the data operation instruction receiving module may specifically be configured to: and receiving a data operation instruction forwarded by the security side of the industrial security gateway, wherein the data operation instruction is sent to the opening side of the industrial security gateway by the second server and ferred to the security side through the opening side.
The target device data acquisition module may be specifically configured to: and acquiring target equipment data matched with the data operation instruction from the data processing server.
The target device sending module may specifically be configured to: and sending the target device data to the second server.
In this embodiment, the target device sending module may be further configured to: compressing the target device data into a data packet; generating a check code according to the data statistics briefing; sending the data packet carrying the check code to the second server; and the second server is used for verifying the data packet carrying the check code according to the previously received data statistics briefing after receiving the data packet carrying the check code.
In this embodiment, the open side of the industrial security gatekeeper is configured with a message queue subscribed by the second server, and the device data sending module 702 may be further configured to: and if the data type is an alarm type, sending the alarm type equipment data to the message queue so as to forward the alarm type equipment data to the second server in real time.
The embodiment of the present application further provides a data transmission device, which may be used to implement the steps implemented by the first server in the foregoing method embodiments.
Referring to fig. 8, a schematic diagram of a data transmission apparatus for an industrial gas enterprise according to an embodiment of the present application is shown, where the apparatus may be applied to a second server, and the second server may be installed at an open side of an industrial safety gatekeeper, which may be used to separate an internal system from an external system of the industrial gas enterprise. The apparatus may specifically include a message information receiving module 801 and a data statistics briefing recovery module 802, where:
a message information receiving module 801, configured to receive message information forwarded through the open side of the industrial security gatekeeper, where the message information includes information representing a format and data content of a data statistics briefing in a tabular form;
a data statistics briefing recovery module 802, configured to recover the data statistics briefing in the form according to the message information;
the data statistics briefing is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data are sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of the industrial safety gatekeeper.
The embodiment of the present application further provides a data transmission apparatus, which may be used to implement the steps implemented by the second server in the foregoing method embodiment.
For the apparatus embodiment, since it is substantially similar to the method embodiment, it is described relatively simply, and reference may be made to the description of the method embodiment section for relevant points.
Referring to fig. 9, a schematic diagram of a server provided in an embodiment of the present application is shown. As shown in fig. 9, the server 900 in the embodiment of the present application includes: a processor 910, a memory 920, and a computer program 921 stored in the memory 920 and operable on the processor 910. When the processor 910 executes the computer program 921, steps in various embodiments of the data transmission method of the industrial gas enterprise described above are implemented, for example, steps S101 to S104 shown in fig. 1 or steps S601 to S602 shown in fig. 6. Alternatively, the processor 910, when executing the computer program 921, implements the functions of each module/unit in each device embodiment described above, such as the functions of the modules 701 to 704 shown in fig. 7 or the modules 801 to 802 shown in fig. 8.
Illustratively, the computer program 921 may be partitioned into one or more modules/units, which are stored in the memory 920 and executed by the processor 910 to accomplish the present application. The one or more modules/units may be a series of computer program instruction segments capable of performing specific functions, which may be used to describe the execution of the computer program 921 in the server 900. For example, the computer program 921 may be divided into a data type determining module, an equipment data transmitting module, a data statistics briefing receiving module, and a data statistics briefing transmitting module, and the specific functions of each module are as follows:
a data type determination module for determining a data type of device data from the industrial field device;
the equipment data sending module is used for sending the statistical equipment data to a data processing server if the data type is statistical, and the data processing server is installed on the safety side of the industrial safety gatekeeper;
the data statistics briefing receiving module is used for receiving the data statistics briefing fed back by the data processing server, and the data statistics briefing comprises comprehensive data obtained by summarizing and sorting multiple statistical type equipment data;
and the data statistics briefing sending module is used for sending the data statistics briefing to a second server installed at the open side of the industrial safety gatekeeper.
Alternatively, the computer program 921 may be divided into a message information receiving module and a data statistics briefing recovery module, and the specific functions of each module are as follows:
the message information receiving module is used for receiving message information forwarded by the open side of the industrial security gateway, wherein the message information comprises information representing the format and the data content of the data statistics briefing in a tabular form;
the data statistics briefing recovery module is used for recovering the data statistics briefing in the form according to the message information;
the data statistics briefing is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data are sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of the industrial safety gatekeeper.
The server 900 may be the first server or the second server in the foregoing embodiments, and the server 900 may be a desktop computer, a cloud server, or other computing devices. The server 900 may include, but is not limited to, a processor 910, a memory 920. Those skilled in the art will appreciate that fig. 9 is merely an example of a server 900 and is not intended to limit the server 900 and may include more or fewer components than those shown, or some components may be combined, or different components, e.g., the server 900 may also include input-output devices, network access devices, buses, etc.
The Processor 910 may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware component, etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The storage 920 may be an internal storage unit of the server 900, such as a hard disk or a memory of the server 900. The memory 920 may also be an external storage device of the server 900, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), or the like, provided on the server 900. Further, the memory 920 may also include both an internal storage unit and an external storage device of the server 900. The memory 920 is used for storing the computer program 921 and other programs and data required by the server 900. The memory 920 may also be used to temporarily store data that has been output or is to be output.
The embodiment of the application also discloses a server, which comprises a memory, a processor and a computer program stored in the memory and capable of running on the processor, wherein the processor executes the computer program to realize the data transmission method of the industrial gas enterprise according to the foregoing embodiments.
The embodiment of the application also discloses a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to realize the data transmission method of the industrial gas enterprise according to the previous embodiments.
The embodiment of the application also discloses a computer program product, which when running on a computer device, causes the computer device to execute the data transmission method of the industrial gas enterprise described in the foregoing embodiments.
The embodiment of the application also discloses a data transmission system, which comprises a first server, a second server and a data processing server, wherein the first server and the data processing server are arranged on the safe side of the industrial safety gatekeeper, and the second server is arranged on the open side of the industrial safety gatekeeper; the first server and/or the second server are/is used for realizing the data transmission method of the industrial gas enterprise in the various embodiments.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present application, and not for limiting the same. Although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not depart from the spirit and scope of the embodiments of the present application, and they should be construed as being included in the present application.
Claims (9)
1. A data transmission method for an industrial gas enterprise, the data transmission method being applied to a first server installed on a security side of an industrial security gateway for separating an internal system from an external system of the industrial gas enterprise, the method comprising:
determining a data type of device data from the industrial field device;
if the data type is statistical type, sending the statistical type equipment data to a data processing server, wherein the data processing server is installed on the safety side of the industrial safety gateway;
receiving a data statistics brief fed back by the data processing server, wherein the data statistics brief comprises comprehensive data obtained by summarizing and sorting multiple statistical type equipment data;
sending the data statistics briefing to a second server installed at the open side of the industrial security gatekeeper, wherein the open side of the industrial security gatekeeper is configured with a message queue subscribed by the second server;
and if the data type is an alarm type, sending the alarm type equipment data to the message queue so as to forward the alarm type equipment data to the second server in real time.
2. The method of claim 1, wherein the data statistics briefing is in a tabular form, and wherein sending the data statistics briefing to a second server installed on an open side of the industrial security gatekeeper comprises:
analyzing the data statistics briefing in the form of the table into message information, wherein the message information comprises information representing the format and the data content of the data statistics briefing;
sending the message information to the second server; and the second server is used for recovering the data statistics briefing in the form according to the message information.
3. The method of claim 2, wherein a plurality of uplink unidirectional transmission links are configured between the first server and the secure side of the industrial security gatekeeper, and between the open side of the industrial security gatekeeper and the second server, and each of the plurality of uplink unidirectional transmission links has a link number; the sending the message information to the second server includes:
determining a target uplink from a plurality of the uplink unidirectional transmission links according to the link number, the target uplink being a link of the first server to the second server via the industrial security gatekeeper;
and sending the message information to a secure side of the industrial security gatekeeper through the target uplink, wherein the industrial security gatekeeper is used for ferrying the message information from the secure side to the open side so as to transmit the message information to the second server through the target uplink.
4. The method of any of claims 1-3, wherein after sending the data statistics briefing to a second server installed on an open side of the industrial security gatekeeper, the method further comprises:
receiving a data operation instruction forwarded by a security side of the industrial security gateway, wherein the data operation instruction is sent to an open side of the industrial security gateway by the second server and ferried to the security side through the open side;
acquiring target equipment data matched with the data operation instruction from the data processing server;
and sending the target device data to the second server.
5. The method of claim 4, wherein sending the target device data to the second server comprises:
compressing the target device data into data packets;
generating a check code according to the data statistics briefing;
sending the data packet carrying the check code to the second server; and the second server is used for verifying the data packet carrying the check code according to the previously received data statistics briefing after receiving the data packet carrying the check code.
6. A data transmission method for an industrial gas enterprise, wherein the data transmission method is applied to a second server, the second server is installed on an open side of an industrial safety gatekeeper, the industrial safety gatekeeper is used for separating an internal system and an external system of the industrial gas enterprise, the open side of the industrial safety gatekeeper is further configured with a message queue subscribed by the second server, and the method comprises the following steps:
receiving message information forwarded through an open side of the industrial safety gateway, wherein the message information comprises information representing the format and the data content of the data statistics briefing in a tabular form;
recovering the data statistics briefing in the form according to the message information;
the data statistics briefing is comprehensive data obtained by summarizing and sorting statistical equipment data by a data processing server, the statistical equipment data is sent to the data processing server by a first server, and the first server and the data processing server are both installed on the safety side of the industrial safety gatekeeper;
and when the alarm type equipment data exists in the message queue, consuming the alarm type equipment data to realize the real-time forwarding of the alarm type equipment data, wherein the alarm type equipment data is sent to the message queue by the first server.
7. A server comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor when executing the computer program implements the industrial gas enterprise data transmission method of any of claims 1-6.
8. A computer-readable storage medium, in which a computer program is stored, which computer program, when being executed by a processor, carries out a method of data transmission of an industrial gas enterprise according to any one of claims 1-6.
9. A data transmission system is characterized by comprising a first server, a second server and a data processing server, wherein the first server and the data processing server are installed on the safe side of an industrial safety gateway, and the second server is installed on the open side of the industrial safety gateway; wherein the first server is used for realizing the data transmission method of the industrial gas enterprise according to any one of claims 1-5, and the second server is used for realizing the data transmission method of the industrial gas enterprise according to claim 6.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210904679.1A CN114979268B (en) | 2022-07-29 | 2022-07-29 | Data transmission method, device, server and system for industrial gas enterprise |
| PCT/CN2022/120989 WO2024021280A1 (en) | 2022-07-29 | 2022-09-23 | Data transmission method and device for industrial gas enterprise, and server and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210904679.1A CN114979268B (en) | 2022-07-29 | 2022-07-29 | Data transmission method, device, server and system for industrial gas enterprise |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114979268A CN114979268A (en) | 2022-08-30 |
| CN114979268B true CN114979268B (en) | 2022-10-28 |
Family
ID=82968675
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210904679.1A Active CN114979268B (en) | 2022-07-29 | 2022-07-29 | Data transmission method, device, server and system for industrial gas enterprise |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN114979268B (en) |
| WO (1) | WO2024021280A1 (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114979268B (en) * | 2022-07-29 | 2022-10-28 | 广州市华达石化有限公司 | Data transmission method, device, server and system for industrial gas enterprise |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104426891A (en) * | 2013-09-06 | 2015-03-18 | 北京中盈安信技术服务有限公司 | Data processing method and system |
| CN106572180A (en) * | 2016-11-07 | 2017-04-19 | 中广核（深圳）辐射监测技术有限公司 | System and method transmitting nuclear power plant dosage data from industrial network to management network |
| CN109639797A (en) * | 2018-12-12 | 2019-04-16 | 深圳市中电数通智慧安全科技股份有限公司 | A kind of wisdom safety monitoring system |
Family Cites Families (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102685119A (en) * | 2012-04-28 | 2012-09-19 | 上海杰之能信息科技有限公司 | Data transmitting/receiving method, data transmitting/receiving device, transmission method, transmission system and server |
| US9046886B2 (en) * | 2012-04-30 | 2015-06-02 | General Electric Company | System and method for logging security events for an industrial control system |
| US9253054B2 (en) * | 2012-08-09 | 2016-02-02 | Rockwell Automation Technologies, Inc. | Remote industrial monitoring and analytics using a cloud infrastructure |
| US9866635B2 (en) * | 2014-03-26 | 2018-01-09 | Rockwell Automation Technologies, Inc. | Unified data ingestion adapter for migration of industrial data to a cloud platform |
| CN110891052A (en) * | 2019-11-06 | 2020-03-17 | 北京吉威数源信息技术有限公司 | Cross-network query system and method for spatial data of natural resources |
| CN112019626B (en) * | 2020-08-31 | 2021-06-01 | 航天新长征大道科技有限公司 | Industrial Internet of things system and data processing method |
| CN114979268B (en) * | 2022-07-29 | 2022-10-28 | 广州市华达石化有限公司 | Data transmission method, device, server and system for industrial gas enterprise |
-
2022
- 2022-07-29 CN CN202210904679.1A patent/CN114979268B/en active Active
- 2022-09-23 WO PCT/CN2022/120989 patent/WO2024021280A1/en unknown
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104426891A (en) * | 2013-09-06 | 2015-03-18 | 北京中盈安信技术服务有限公司 | Data processing method and system |
| CN106572180A (en) * | 2016-11-07 | 2017-04-19 | 中广核（深圳）辐射监测技术有限公司 | System and method transmitting nuclear power plant dosage data from industrial network to management network |
| CN109639797A (en) * | 2018-12-12 | 2019-04-16 | 深圳市中电数通智慧安全科技股份有限公司 | A kind of wisdom safety monitoring system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114979268A (en) | 2022-08-30 |
| WO2024021280A1 (en) | 2024-02-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103905255A (en) | Remote automatic alarm system and method for internal hardware operation faults of servers | |
| CN110224865A (en) | A kind of log warning system based on Stream Processing | |
| CN114979268B (en) | Data transmission method, device, server and system for industrial gas enterprise | |
| CN110929896A (en) | Security analysis method and device for system equipment | |
| CN110620685A (en) | Method and device for reporting device exception | |
| US10873467B2 (en) | Method and system for compression and optimization of in-line and in-transit information security data | |
| CN116257021A (en) | Intelligent network security situation monitoring and early warning platform for industrial control system | |
| TWI448975B (en) | Dispersing-type algorithm system applicable to image monitoring platform | |
| CN117493116A (en) | Monitoring processing method, platform and device of acquisition terminal | |
| CN110011872B (en) | Method and device for monitoring state of streaming computing platform based on diagnostic message | |
| US20210126932A1 (en) | System for technology infrastructure analysis | |
| US10528402B2 (en) | Architecture for correlating events for supercomputer surveillance | |
| CN114006940A (en) | Building integrated management information pushing method, system, computer and storage medium | |
| CN114500316A (en) | Method and system for inspecting equipment of Internet of things | |
| KR101639713B1 (en) | Outage-management system | |
| CN112802276A (en) | Tax self-service terminal monitoring system | |
| CN105471621A (en) | Alarm processing system and method | |
| CN111681397A (en) | Distribution network automation short message sending method, sending system and storage medium | |
| CN115314362B (en) | Remote dispatching terminal fault detection method and system based on telemetry network | |
| CN116016261B (en) | System operation and maintenance method, device and equipment | |
| CN111522712A (en) | BMC log collection system | |
| CN114973615B (en) | Method and device for monitoring emergency, electronic equipment and storage medium | |
| CN117424797B (en) | Real-time large concurrent alarm receiving and processing method | |
| CN111405028B (en) | Information processing method, device, server, electronic device and medium | |
| FI129101B (en) | Automated network monitoring and control |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 40073606 Country of ref document: HK |