CN101355484A - Communication isolation device using unidirection analog transmission - Google Patents

Communication isolation device using unidirection analog transmission Download PDF

Info

Publication number
CN101355484A
CN101355484A CNA2008102121433A CN200810212143A CN101355484A CN 101355484 A CN101355484 A CN 101355484A CN A2008102121433 A CNA2008102121433 A CN A2008102121433A CN 200810212143 A CN200810212143 A CN 200810212143A CN 101355484 A CN101355484 A CN 101355484A
Authority
CN
China
Prior art keywords
data
module
communication interface
communication
private network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2008102121433A
Other languages
Chinese (zh)
Other versions
CN101355484B (en
Inventor
靳伟敬
吕燕石
陈贺
陈洪雨
孟广民
杨立波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Hebei Electric Power Co Ltd
Shijiazhuang Kelin Electric Co Ltd
Original Assignee
SHIJIAZHUANG KELIN AUTOMATION CO Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SHIJIAZHUANG KELIN AUTOMATION CO Ltd filed Critical SHIJIAZHUANG KELIN AUTOMATION CO Ltd
Priority to CN 200810212143 priority Critical patent/CN101355484B/en
Publication of CN101355484A publication Critical patent/CN101355484A/en
Application granted granted Critical
Publication of CN101355484B publication Critical patent/CN101355484B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Communication Control (AREA)

Abstract

The invention provides a communication isolation device adopting one-way analog transmission, being invented to solve the problem in the prior art that the security of an outer network does not accord with relevant regulations when connected with a special network. The communication isolation device comprises a special communication interface module, a coding module, a data modulation processing circuit module, a data demodulation processing circuit module, a decoding module and an outer network communication interface module, wherein the coding module has data transmitting function but does not have data receiving function; the decoding module has data receiving function but does not have data transmitting function; and the data modulation processing circuit module and the data demodulation processing circuit module have conversion function between analog signals and data signals. In this way, the communication isolation device can ensure that data can only be transmitted from the special network to the outer network by physical one-way analog transmission instead of reverse transmitting, thereby greatly improving the security of the network.

Description

A kind of communication isolation device that adopts unidirectional analogue transmission
Technical field
The present invention proposes a kind of communication isolation device that adopts unidirectional analogue transmission.
Background technology
For production industries such as oil, petrochemical industry, electric power, iron and steel, collieries, quantity-produced fail safe and reliability there is high requirement.This enterprise is high for the security requirement of process control network, therefore all adopts private network.But in the existing private network communication system, along with the development of informatization, more and more data will be shared with other local system or common communication information network, checks, monitors various information for networking.Owing to need tie point be arranged with outer net, the external world can invade in the private network communication system by tie point, influence even destruction private network system.
But a lot of enterprises have to again private network is connected with outer net, for example coal, electric power enterprise, their private network must be connected with the network of environmental monitoring department, monitor with the enterprise to discharging flue gas pollutants such as power plant, this will be linked into power communication system to the monitoring system of environmental administration.And mostly this access is to adopt two-way direct communication to insert.Fig. 1 has represented the situation that existing other system is connected with the power private network system.In this case, the fail safe of private network can't be protected.The CEMS system of power plant has been linked into the Internet by the GPRS terminal, and communication is two-way, has had potential safety hazard for the operation of electric power system, does not meet " electric power secondary system security protection regulation ".Therefore, be badly in need of a kind of unidirectional safety insulating device of exploitation, be installed between CEMS system of power plant and the GPRS terminal, be not subjected to the invasion of ambient systems to guarantee system in the private network.
Summary of the invention
At defective that exists in the prior art and deficiency, the objective of the invention is to propose a kind of communication isolation device that adopts unidirectional analogue transmission, can when private network is connected with outer net, meet relevant regulations, and improve internet security.
In order to achieve the above object, the present invention proposes a kind of communication isolation device that adopts unidirectional analogue transmission, comprising:
The private network communication interface module, described private network communication interface module realizes the processing with the private network communication agreement, the communication interface circuit conversion is with the data that obtain transmitting;
Coding module, described coding module is with data and command coding and export to the data-modulated treatment circuit, has the data sending function and does not have the Data Receiving function;
Data-modulated processing circuit module, this module are modulated the data of coding module output and are output as analog signal; Data output unit and instruction output are arranged.
Data demodulates processing circuit module, this module receive from the analog signal of data-modulated processing circuit module and carry out demodulation process, send the digital signal that demodulates to decoder module and handle.
Decoder module, described decoder module will be converted to the valid data that need transmission from the digital signal that the data demodulates processing circuit module receives; Institute's decoder module has the Data Receiving function and does not have the data sending function;
The outer net communication interface modules, described outer net communication interface modules is realized the processing with outer net communication protocol, the communication interface circuit conversion transfers data to outer net.
Preferred as technique scheme, described communication interface modules adopts RS-232 communication interface mode, described data modulation circuitry is chip used to be AD420AR and MCP6002I, and described private network and outer net communication interface modules CPU, encoding process, decoding processing, data demodulates treatment circuit are the DSPIC6012 chip.
The present invention proposes a kind of communication isolation device that adopts unidirectional analogue transmission, fail safe does not meet the problem of relevant regulations and invents when being connected with private network at outer net in the prior art, comprising: private network communication interface module, coding module, data-modulated processing circuit module, data demodulates processing circuit module, decoder module, outer net communication interface modules; Wherein said coding module has the data sending function and does not have the Data Receiving function; Institute's decoder module has the Data Receiving function and does not have the data sending function; Data-modulated processing circuit module and data demodulates processing circuit module have the translation function between analog signal and the data-signal.So just can guarantee that data only can be sent to outer net by private network, process of transmitting is a unidirectional analogue transmission physically, and can not oppositely send, and has so just improved the fail safe of network greatly.
The device course of work is: after private network communication interface module and private network two-way alternate communication obtain data, by coding module output digital signal, be modulated to analog signal again, be demodulated into digital signal to analog signal, receive by decoder module again and handle, realize and the two-way communication of outer net by the outer net communication interface modules at last, transfer data to outer net.Transfer of data is the unidirectional analogue transmission on the physical circuit in the device, so just can guarantee that data only can be sent to outer net by private network, and can not oppositely send, and so just makes private network not be subjected to the influence of outer net fully.
Description of drawings
Fig. 1 is the structural representation that existing other system is connected with the power private network system;
Fig. 2 is a preferred embodiment example structural representation of the present invention;
Fig. 3 is private network communication interface module, coding module;
Fig. 4 is the data-modulated processing circuit module;
Fig. 5 is data demodulates processing circuit module, decoder module, outer net communication interface modules.
Embodiment
Below in conjunction with accompanying drawing, the specific embodiment of the present invention is described in further detail.For the person of ordinary skill in the field, from detailed description of the invention, above-mentioned and other purposes of the present invention, feature and advantage will be apparent.
The present invention proposes a kind of communication isolation device that adopts unidirectional analogue transmission, its structure comprises as shown in Figure 2: data send part and Data Receiving part.
Described data sending part branch comprises:
The private network communication interface module, described private network communication interface module realizes the processing with the private network communication agreement, the communication interface circuit conversion is with the data that obtain transmitting;
Coding module, described coding module is with data and command coding and export to the data-modulated treatment circuit, has the data sending function and does not have the Data Receiving function;
Data-modulated processing circuit module, this module are modulated the data of coding module output and are output as analog signal; Data output unit and instruction output are arranged.
Described data reception portion branch comprises:
Data demodulates processing circuit module, this module receive from the analog signal of data-modulated processing circuit module and carry out demodulation process, send the digital signal that demodulates to decoder module and handle.
Decoder module, described decoder module will be converted to the valid data that need transmission from the digital signal that the data demodulates processing circuit module receives; Institute's decoder module has the Data Receiving function and does not have the data sending function;
The outer net communication interface modules, described outer net communication interface modules is realized the processing with outer net communication protocol, the communication interface circuit conversion transfers data to outer net;
The communication isolation device that first preferred embodiment of the invention proposes can be realized the single file transfer of data, prevents because of be connected the potential safety hazard that causes with outer net.
Wherein spacer assembly can be specially shown in Fig. 3,4,5, and the private network communication interface module is a RS-232 communication interface mode, and incoming level modular converter and transmission level modular converter are ADM202; The transmitting-receiving pin of private network communication interface chip U4 (11,12 pin) links to each other with light-coupled isolation chip (TLP521-1) U2, U3 respectively, isolates 31,32 pins that back U2, U3 meet DSPIC6012 chip U1 again.CPU (U1) programmes to obtain the data of needs transmission according to private network system communication protocol.
The encoding process module will be encoded with implication by type by the data that the private network communication interface module obtains, because of the modulation circuit employing is analog signal transmission, the D/A chip is 16, in order to guarantee the integrality of transfer of data, data are transmitted by byte, each byte moves to left eight, mend 0x80 for minimum eight, give data modulation circuitry again, to solve the precision problem of analogue transmission, data output is output as high level with other one road D/A simultaneously, effective as instruction with these data of indication the other side, can sample; Coding module links to each other with the data-modulated treatment circuit by spi bus, 4 pins of U1 connect 8 pin of U5 and U6, and 5 pins of U1 connect 9 pins of U5, and 6 pins of U1 connect 10 pins of U6,10 pins of U5 link to each other with 9 pins of U6 then, and 8 pins of U1 link to each other with 7 pins of U5 and U6.
The data-modulated treatment circuit mainly use U5, U6, OP1,17 pins of U5 link to each other with 3 pins of OP1,17 pins and the OP1 of U6 has 5 pins to link to each other, OP1 has 1 pin and 7 pins to connect 13,14 pins of U17 respectively behind resistance.
In the chip DSPIC6012 of decoder module (U17), be integrated with data demodulates treatment circuit part, just 12 A/D modular converter; Decoder module is at first checked the instruction input, if designation data effectively then the sampled data input, with four of the data shift rights that sample, to obtain valid data.
The outer net communication interface modules by U17 by with the communication protocol of outer net, transfer data to outer net.The outer net communication interface modules is a RS-232 communication interface mode, and 31,32 pins of U17 link to each other with optocoupler U15, U16, links to each other with 11,12 pins of U18 after U15, U16 isolate, and 13,14 pins of U18 link to each other with the RS-232 communication interface of outer net again.
Whole system has only the data of private network system to be sent to other system, can not receive the data of other system, so just guarantees the safety of private network system, has also met the standard of some private network system.
Though; the present invention clearly demonstrates by above embodiment and accompanying drawing thereof; yet under the situation that does not deviate from spirit of the present invention and essence thereof; the person of ordinary skill in the field works as can make various corresponding variations and correction according to the present invention, but these corresponding variations and correction all should belong to the protection range of claim of the present invention.

Claims (4)

1, a kind of communication isolation device that adopts unidirectional analogue transmission is characterized in that, comprising:
The private network communication interface module, described private network communication interface module realizes the processing with the private network communication agreement, the communication interface circuit conversion is with the data that obtain transmitting;
Coding module, described coding module is with data and command coding and export to the data-modulated treatment circuit, has the data sending function and does not have the Data Receiving function;
Data-modulated processing circuit module, this module are modulated the data of coding module output and are output as analog signal; Data output unit and instruction output are arranged.
Data demodulates processing circuit module, this module receive from the analog signal of data-modulated processing circuit module and carry out demodulation process, send the digital signal that demodulates to decoder module and handle.
Decoder module, described decoder module will be converted to the valid data that need transmission from the digital signal that the data demodulates processing circuit module receives; Institute's decoder module has the Data Receiving function and does not have the data sending function;
The outer net communication interface modules, described outer net communication interface modules is realized the processing with outer net communication protocol, the communication interface circuit conversion transfers data to outer net.
2, a kind of communication isolation device that adopts unidirectional analogue transmission according to claim 1 is characterized in that, described communication interface modules adopts the RS-232 communication interface, and the used interface level transferring chip is ADM202.
3, a kind of communication isolation device that adopts unidirectional analogue transmission according to claim 1 is characterized in that, described data modulation circuitry is chip used to be AD420AR and MCP6002I.
4, a kind of communication isolation device that adopts unidirectional analogue transmission according to claim 1, its feature are that described private network and outer net communication interface modules CPU, encoding process, decoding processing, data demodulates treatment circuit are the DSPIC6012 chip.
CN 200810212143 2008-09-08 2008-09-08 Communication isolation device using unidirection analog transmission Active CN101355484B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 200810212143 CN101355484B (en) 2008-09-08 2008-09-08 Communication isolation device using unidirection analog transmission

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 200810212143 CN101355484B (en) 2008-09-08 2008-09-08 Communication isolation device using unidirection analog transmission

Publications (2)

Publication Number Publication Date
CN101355484A true CN101355484A (en) 2009-01-28
CN101355484B CN101355484B (en) 2012-11-07

Family

ID=40308088

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 200810212143 Active CN101355484B (en) 2008-09-08 2008-09-08 Communication isolation device using unidirection analog transmission

Country Status (1)

Country Link
CN (1) CN101355484B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102088393B (en) * 2009-12-02 2013-07-03 南京南瑞继保电气有限公司 Method for transmitting positive and negative data across safety zone
CN103929417A (en) * 2014-03-27 2014-07-16 中国科学院长春光学精密机械与物理研究所 Security data interaction structure and method based on optical isolation technology
CN105812387A (en) * 2016-05-09 2016-07-27 北京航天数控系统有限公司 Unidirectional safe data exchange device

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103036876B (en) * 2012-12-07 2016-03-23 福州和达电子科技有限公司 A kind of Integral computer equipment and application thereof realizing unified operation under Network Isolation state

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN201252556Y (en) * 2008-09-08 2009-06-03 石家庄科林自动化有限公司 Communication isolating device using unidirectional analogue transmission

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2703366Y (en) * 2004-05-08 2005-06-01 青岛金弘测控技术发展有限公司 Single direction transmission gateway for computer network
CN2850148Y (en) * 2005-01-28 2006-12-20 朱寿祥 Unidirectional physics isolation type network safety device
CN100521598C (en) * 2006-02-09 2009-07-29 南京工业大学 Method and system for realizing safety communication between internal and external networks of computer based on simplex communication principle

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN201252556Y (en) * 2008-09-08 2009-06-03 石家庄科林自动化有限公司 Communication isolating device using unidirectional analogue transmission

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102088393B (en) * 2009-12-02 2013-07-03 南京南瑞继保电气有限公司 Method for transmitting positive and negative data across safety zone
CN103929417A (en) * 2014-03-27 2014-07-16 中国科学院长春光学精密机械与物理研究所 Security data interaction structure and method based on optical isolation technology
CN105812387A (en) * 2016-05-09 2016-07-27 北京航天数控系统有限公司 Unidirectional safe data exchange device

Also Published As

Publication number Publication date
CN101355484B (en) 2012-11-07

Similar Documents

Publication Publication Date Title
CN101355484B (en) Communication isolation device using unidirection analog transmission
CA1180074A (en) Forward error correction using coding and redundant transmission
EP0245469A1 (en) Bi-directional data telemetry system
JPS5859644A (en) Computer communication controller
CN205212860U (en) Single bus communication module
CN202385106U (en) Unidirectionally isolated optical gate
CN101127680A (en) Unidirectional physical separation network brake for USB optical fiber
CN201252556Y (en) Communication isolating device using unidirectional analogue transmission
CN101453136B (en) GIS interval control signal transmission apparatus and signal transmission method
KR20110040004A (en) System and apparatus for transferring data only in one direction
CN201732158U (en) Self-checking device
CN104935381A (en) Multichannel Ethernet electric-port-optical-port one-way transmission apparatus
CN107395477A (en) A kind of single-chip microcomputer input/output interface control device based on communication protocol
CN205812015U (en) A kind of serial communication long haul optical transmission set
CA2399076C (en) Method and apparatus for achieving 180· phase invariant transmission in a pcm modem system
CN105103446B (en) A kind of signal processing apparatus
CN208985362U (en) A kind of wireless digital transmission device for bridge health monitoring
CN200956595Y (en) Interface converting device
CN202438028U (en) Firefighting equipment transmission data conversion device
CN1159859C (en) Reset bus and interface apparatus
CN209324338U (en) A kind of single-core cable relay transmission device
CN215818138U (en) Device for realizing one-way transmission of cable
CN2703366Y (en) Single direction transmission gateway for computer network
CN107145116A (en) A kind of interface extending device based on single-chip microcomputer input/output interface
CN205429877U (en) Smart power grids transmission system based on digit security chip

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C53 Correction of patent of invention or patent application
CB02 Change of applicant information

Address after: 050222, Hebei City, Shijiazhuang province red flag Street South, South Road, down wall section

Applicant after: Shijiazhuang KE Electric Co.,Ltd.

Address before: 050222, Hebei City, Shijiazhuang province red flag Street South, South Road, down wall section

Applicant before: Shijiazhuang Kelin Automation Co., Ltd.

COR Change of bibliographic data

Free format text: CORRECT: APPLICANT; FROM: SHIJIAZHUANG KELIN AUTOMATION CO., LTD. TO: SHIJIAZHUANG KE ELECTRIC CO.,LTD.

ASS Succession or assignment of patent right

Owner name: HEBEI ELECTRIC POWER CORPORATION

Effective date: 20120417

C41 Transfer of patent application or patent right or utility model
C53 Correction of patent of invention or patent application
CB03 Change of inventor or designer information

Inventor after: Chen Hongyu

Inventor after: Lv Yanshi

Inventor after: Chen He

Inventor after: Meng Guangmin

Inventor after: Yang Libo

Inventor after: Zhang Guoqiang

Inventor after: Li Yuan

Inventor after: Jin Weijing

Inventor before: Jin Weijing

Inventor before: Lv Yanshi

Inventor before: Chen He

Inventor before: Chen Hongyu

Inventor before: Meng Guangmin

Inventor before: Yang Libo

COR Change of bibliographic data

Free format text: CORRECT: INVENTOR; FROM: JIN WEIJING LV YANSHI CHEN HE CHEN HONGYU MENG GUANGMIN YANG LIBO TO: CHENHONGYU LV YANSHI CHEN HE MENG GUANGMIN YANG LIBO ZHANG GUOQIANG LI YUAN JIN WEIJING

TA01 Transfer of patent application right

Effective date of registration: 20120417

Address after: 050222, Hebei City, Shijiazhuang province red flag Street South, South Road, down wall section

Applicant after: Shijiazhuang KE Electric Co.,Ltd.

Co-applicant after: Hebei Electric Power Corporation

Address before: 050222, Hebei City, Shijiazhuang province red flag Street South, South Road, down wall section

Applicant before: Shijiazhuang KE Electric Co.,Ltd.

C14 Grant of patent or utility model
GR01 Patent grant