Embodiment
The present invention is in order to improve the reliability of transfer of data in Industrial Ethernet, and the embodiment of the present invention provides a kind of data safe transmission method, system and device based on Industrial Ethernet.
Below in conjunction with Figure of description, the present invention is described in detail.
A kind of Security Data Transmission process schematic diagram based on Industrial Ethernet that Fig. 1 provides for the embodiment of the present invention, this process comprises the following steps:
S101: switching equipment receives the message that other equipment send, and wherein said message comprises data message, its digital signature, timestamp information and key information.
In embodiments of the present invention in order to guarantee the fail safe of message transmissions in Industrial Ethernet, when other equipment send message to switching equipment, according to the data message of this message, determine its digital signature, determine the transmitting time of this message, timestamp information, digital signature, key information and data message that this transmitting time is corresponding send to the switching equipment as receiving terminal in the lump.Wherein, described other equipment can be terminal and sensor node device, can be also the switching equipment such as switch.
S102: extract the timestamp information in described message, this message is verified, and according to the key information of preserving, this message is verified, judge whether to be verified, when being verified, carry out step S103, otherwise, the data of reception are abandoned.
When switching equipment receives after the message of other equipment transmissions, extracting timestamp information and the key information of this message verifies this message, it is mainly the checking realizing transmitting terminal identity, in embodiments of the present invention as the switching equipment of receiving terminal when this transmitting apparatus is carried out to authentication, can first by timestamp information, verify and then carry out key information checking, or, first by key information, verify and then carry out timestamp information checking.
S103: the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message.
After the identity of this transmitting terminal being verified by timestamp information and key information, in order further to increase the fail safe of data white list transmission, this digital signature generates according to the data message of this message in embodiments of the present invention, therefore according to this data signature, can also further to other equipment as transmitting terminal, verify.
This concrete digital signature, when generating, according to hash algorithm and this data message, is determined the cryptographic Hash of this data message as other equipment of transmitting terminal; According to the cryptographic Hash of this data message of determining, and the private key of preserving is encrypted generating digital signature to the cryptographic Hash of this data message.Transmitting terminal can, by this digital signature that comprises generation and the message of data message, send to the switching equipment as receiving terminal.
S104: the cryptographic Hash obtaining after the cryptographic Hash of this data message and deciphering is compared, judge that whether the cryptographic Hash of this data message is consistent with the cryptographic Hash of acquisition after deciphering, when judgment result is that while being, carry out step S105, otherwise, determine that these data are dangerous, by this packet loss.
Known according to the generative process of above-mentioned digital signature, this digital signature generates according to hash algorithm and the private key preserved as other equipment of transmitting terminal, therefore receiving terminal is when verifying the identity of transmitting terminal according to this digital signature, the second switching equipment as receiving terminal identifies digital signature in the message that comprises this data message and digital signature thereof, the PKI of preserving according to self is decrypted this digital signature, obtain its corresponding cryptographic Hash, afterwards this data message is carried out to Hash operation, determine the cryptographic Hash of this numeral white list.
The cryptographic Hash obtaining after the cryptographic Hash of data message and deciphering is compared, whether unanimously judge both, when judging that both are consistent, confirm that this transmitting terminal has corresponding data and sends identity, complete the authentication of data sending terminal.
S105: when judging that the cryptographic Hash of this data message and the cryptographic Hash of the rear acquisition of deciphering are consistent, extract the industrial protocol information in described data message.
After the authentication of transmitting terminal being passed through by above-mentioned flow process in Industrial Ethernet, the fail safe that comprises data message in the message that need to send this transmitting terminal is further verified, switching equipment extracts the industrial protocol information of this data message, and this industrial protocol information is verified.Wherein, described industrial protocol information comprises: industrial protocol type feature code and industrial protocol keyword.
S106: the described industrial protocol information of extracting is mated with each industrial protocol information of self preserving, when the match is successful, carry out step S107, otherwise, determine that this data message is dangerous, by this packet loss.
Switching equipment as receiving terminal obtains the industrial protocol information of this data message from the message data information of other equipment transmissions as transmitting terminal, in each industrial protocol information of preserving at self, mate, networking model in view of Industrial Ethernet, in Industrial Ethernet, only have the industrial protocol type of switching equipment support to identify and to process, when the industrial protocol information of this data message is not when in switching equipment, the match is successful, illustrate that this data message is illegal, there is potential safety hazard, therefore, by this packet loss.
S107: the data message of processing this message.
Owing to receiving in embodiments of the present invention the second switching equipment of the message of other equipment transmissions, by timestamp information and key information, the data message of this message is verified, and PKI and the hash algorithm according to self, preserved are verified this data message, thereby reach the object to transmitting terminal authentication, because if the identity of transmitting terminal has problem, this data white list cannot be verified; After the authentication of transmitting terminal is passed through, the present invention is by verifying the industrial protocol information of this message data information of extracting, the further fail safe of verification msg, only have with the successful data of each industrial protocol information matches of self preserving and just can carry out subsequent treatment, so the method has improved the fail safe of transfer of data.
In the invention process in order to increase the fail safe of transfer of data, and can make can authenticate the identity of the equipment as transmitting terminal as the switching equipment of receiving terminal, in embodiments of the present invention, when other equipment as transmitting terminal send data to the switching equipment as receiving terminal, after other equipment of this transmitting terminal are processed these data, then send.
Concrete, as these other exchange devices of transmitting terminal, according to this data message to be sent, and the hash algorithm of self preserving, carries out Hash operation to this data message, determines the cryptographic Hash of this data message.The cryptographic Hash of this data message that basis is determined afterwards, and the private key of self preserving, be encrypted the cryptographic Hash of this data message, and generating digital signature, after being attached to this data message by this digital signature afterwards.
In addition, in embodiments of the present invention in order further to increase the fail safe of transfer of data, can make receiving terminal verify the identity of transmitting terminal, as the node device of transmitting terminal or switching equipment, when sending this data message and digital signature thereof, also send key information and the timestamp information corresponding with the transmitting time of this message.
This data safe transmission method providing due to the embodiment of the present invention is applicable in Industrial Ethernet, in Industrial Ethernet main equipment and between equipment by 1588 agreements carry out accurately to time, therefore can guarantee to keep between every equipment very high clock synchronization accuracy.When this information to be verified is timestamp information, as other equipment of transmitting terminal according to the time of self current this message of transmission, the timestamp information of this current time is carried in message to be sent, sends in the lump the switching equipment as receiving terminal with the digital signature of this data message and this data message.
When the switching equipment as receiving terminal receives timestamp information that other equipment send, data message and digital signature thereof, it to be verified, while being only verified, the identity of this transmitting terminal of guarantee is safe.Concrete when described information to be verified is timestamp information, the timestamp information in the described message of described extraction, this message is verified and comprised:
Switching equipment is according to the source address information of described this message of Receive message, and wherein this source address information comprises source IP information or source MAC information;
According to described source address information and the address information of self, determine the link delay between equipment;
According to the described timestamp information of described link delay, extraction, current receiving time information and the time threshold information of preservation, this message is verified.
Concrete, described according to the described timestamp information of described link delay, extraction, current receiving time information and the time threshold information of preservation, this message is verified and comprised:
According to described link delay, the described timestamp information of extraction, determines the theoretical time that receives described message;
Judge the described theoretical time, and whether the poor absolute value of current receiving time information is less than described time threshold information.
When switching equipment receives the message of other equipment transmissions, extract the timestamp information that this message comprises, and record receives time (the i.e. time of reception of this timestamp of the described message that other equipment send, also be the time of reception of digital information and digital signature thereof), obtain the source address information of this message, wherein this source address information comprises source IP information or source MAC information, according to the source IP information of this message or source MAC information and the address information of self, determine that other equipment of transmitting terminal are to the physical link of switch, according to precision interval clock agreement, calculate switching equipment to the link delay of transmitting terminal.
Switching equipment is according to this link delay calculating and the described timestamp information of extraction, determine the time that receives in theory this message, switching equipment receives the absolute value of the time difference of this message according to theoretical receiving time information and record, can authenticate the identity of other equipment as transmitting terminal, if being attack equipment, this information illegally obtains, the absolute value of the time difference of this theory receiving time information and this message of record reception is less than the threshold value of setting scarcely, if contrary these other equipment have the authority that sends this message, the absolute value of the time difference of this theory receiving time information and this message of record reception is less than the threshold value of setting.
Or, switching equipment is according to the time of the described message of reception of this link delay calculating and record, other equipment in theory determined send the time of this message, the absolute value that switching equipment is poor according to this timestamp information of the theoretical transmission time information of this message and extraction, also can authenticate the identity of other equipment as transmitting terminal, if being attack equipment, this information illegally obtains, the poor absolute value of the theoretical transmission time information of this message and this timestamp information of extraction is less than the threshold value of setting scarcely, if contrary these other equipment have the authority that sends this message, the poor absolute value of the theoretical transmission time information of message and this timestamp information of extraction is less than the threshold value of setting.
A detailed implementation process schematic diagram of a kind of Security Data Transmission based on Industrial Ethernet that Fig. 2 provides for the embodiment of the present invention, this process comprises the following steps:
S201: switching equipment receives the message that other equipment send, and wherein said message comprises data message, its digital signature and timestamp information.
Concrete, other equipment are according to data message to be sent, and the hash algorithm of self preserving, this data message is carried out to Hash operation, determine the cryptographic Hash of this data message, according to the cryptographic Hash of this data message of determining, and the private key of self preserving, cryptographic Hash to this data message is encrypted, generating digital signature, after afterwards this digital signature being attached to this data message, according to the time of self current these data of transmission, the timestamp information of this current time is carried in message to be sent, send in the lump the switching equipment as receiving terminal with the digital signature of this data message and this data message.
S202: switching equipment is according to the source address information of described this message of Receive message, and wherein this source address information comprises source IP information or source MAC information.
S203: switching equipment, according to described source address information and the address information of self, is determined the link delay between equipment.
S204: according to described link delay, the described timestamp information of extraction, determines the theoretical time that receives described message.
S205: whether the poor absolute value that judges this theory time and current receiving time information is less than the threshold value of setting, when judgment result is that while being, carries out step S206, otherwise, determine that this counts message dangerous, by this packet loss.
S206: the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message.
S207: the cryptographic Hash obtaining after the cryptographic Hash of this data message and deciphering is compared, judge that whether the cryptographic Hash of this data message is consistent with the cryptographic Hash of acquisition after deciphering, when judgment result is that while being, carry out step S208, otherwise, determine that this message is dangerous, by this packet loss.
S208: extract the industrial protocol information in described data message, this industrial protocol information of extracting is mated with each industrial protocol information of self preserving, when the match is successful, carry out step S209, otherwise, determine that this data message is dangerous, by this packet loss.
S209: the data message of processing this message.
The information to be verified of carrying in the data that in addition, these other equipment send to switching equipment in embodiments of the present invention can also comprise key information.Concrete, these other equipment as transmitting terminal are according to this data message to be sent, and the hash algorithm of self preserving, and this data message is carried out to Hash operation, determine the cryptographic Hash of this data message.The cryptographic Hash of this data message that basis is determined afterwards, and the private key of self preserving, be encrypted the cryptographic Hash of this data message, and generating digital signature, after being attached to this data message by this digital signature afterwards.
As other equipment of transmitting terminal, in order to increase the fail safe of transfer of data, asymmetric (AES) key of preserving according to self, is encrypted this data message and digital signature thereof.I.e. this unsymmetrical key of this key information in embodiments of the present invention.The digital signature of key information, data message and this data message that other equipment send, can be with form transmission expressly, and for the fail safe of transfer of data, above-mentioned information also can adopt PKI to be encrypted rear transmission to above-mentioned information.Be, after other equipment are encrypted the PKI of the data message after encrypting and digital signature and this unsymmetrical key employing self preservation, to send to switching equipment.
When this information to be verified is key information, described authorization information of preserving according to self, switching equipment is verified and is comprised this information to be verified:
The private key that described switching equipment is preserved according to self, is decrypted the message receiving;
Key information in this message after identification deciphering;
Judge whether this key information can be decrypted this data message and digital signature thereof.
In order to increase the fail safe of transfer of data in Industrial Ethernet, and can verify the identity of transmitting terminal, transmitting terminal can also be when carrying out data transmission in embodiments of the present invention, key information to be verified is carried in data, sends in the lump the switching equipment as receiving terminal with the digital signature of this data message and data message.
When switching equipment receives after above-mentioned information, if above-mentioned information is transmitted with cipher mode, the private key that first switching equipment is preserved according to self, is decrypted above-mentioned information, obtains the digital signature of this key information, data message and this data message after deciphering.
In the information of switching equipment after deciphering, identify key information, this key information is verified, first this switching equipment judges whether this key information can be decrypted data message and the digital signature thereof after encrypting, when this key information can be verified this data message and digital signature thereof, determine that the authentication of this transmitting terminal is passed through.
In addition, in order further to increase the reliability of transfer of data, the PKI that switching equipment is also further preserved according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash in embodiments of the present invention, and this data message is carried out to Hash operation, determine the cryptographic Hash of this digital information; The cryptographic Hash obtaining after the cryptographic Hash of digital information and deciphering is compared; When the cryptographic Hash that obtains after the cryptographic Hash of digital information and deciphering is consistent, the authentication of transmitting terminal is passed through, otherwise, determine that to send other equipment of this message dangerous, by this packet loss.
Another detailed implementation process schematic diagram of a kind of Security Data Transmission based on Industrial Ethernet that Fig. 3 provides for the embodiment of the present invention, this process comprises the following steps:
S301: switching equipment receives the message that other equipment send, and wherein said message comprises data message, its digital signature and key information.
Concrete, other equipment are according to data message to be sent, and the hash algorithm of self preserving, this data message is carried out to Hash operation, determine the cryptographic Hash of this data message, according to the cryptographic Hash of this data message of determining, and the private key of self preserving, cryptographic Hash to this data message is encrypted, generating digital signature, after afterwards this digital signature being attached to this data message, the asymmetric AES key of preserving according to self, this data message and digital signature thereof are encrypted, adopt the private key of self preserving, data message and digital signature thereof to this asymmetric AES key and after encrypting are encrypted, and the information after encrypting is sent to switching equipment.
S302: the PKI that switching equipment is preserved according to self, the data after the encryption receiving are decrypted, obtain asymmetric AES key, and data message and digital signature thereof after encrypting.
S303: adopt this asymmetric AES key to be decrypted data message and digital signature information thereof after encrypting, judge whether asymmetric AES key can be decrypted this data message and digital signature thereof, in the time can deciphering, carry out step S304, otherwise, determine that this data message is dangerous, by this packet loss.
S304: the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message.
S305: the cryptographic Hash obtaining after the cryptographic Hash of data message and deciphering is compared, judge that whether the cryptographic Hash of acquisition is consistent after the cryptographic Hash of data message and deciphering, when judgment result is that while being, carry out step S306, otherwise, determine that this data message is dangerous, by this packet loss.
S306: extract the industrial protocol information in described data message.
S307: this industrial protocol information of extracting is mated with each industrial protocol information of self preserving, when the match is successful, carry out step S308, otherwise, determine that this data message is dangerous, by this packet loss
S308: the data message of processing this message.
In the invention process in order further to increase the fail safe of transfer of data, reduce the risk that data plaintext transmission exists, other equipment are after having determined the digital signature of data message, the asymmetric AES key of preserving according to self, this data message and digital signature thereof are encrypted, adopt the PKI of self preserving, data message and digital signature thereof to this asymmetric AES key and after encrypting are encrypted, afterwards, according to the time of self current this message of transmission, the timestamp information of this current time is carried in message to be sent, this timestamp information is sent to switching equipment in the lump.
When switching equipment receives after this message sending in the lump, identify the timestamp information in this message, according to the time that receives this message, and and as the link delay between other equipment of transmitting terminal, determine the theoretical transmission time information of these other equipment, according to this theory transmission time information and this timestamp information determined, identity to this transmitting terminal is verified, when being verified, the private key of preserving according to self, information after the encryption receiving is decrypted, obtain asymmetric AES key, and data message and digital signature information thereof after encrypting.Adopt this asymmetric AES key to be decrypted data message and digital signature information thereof after encrypting, according to whether can further the identity of this transmitting terminal being verified by successful decryption, thus the fail safe that improves transfer of data.
When being verified, the PKI that this switching equipment can also be preserved according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this digital information; The cryptographic Hash obtaining after the cryptographic Hash of digital information and deciphering is compared; Whether the cryptographic Hash and the rear cryptographic Hash obtaining of deciphering that judge digital information be consistent, comes the fail safe to this message source identity again to verify, further improved the fail safe of transfer of data.
In addition, in order further to improve the fail safe of transfer of data in Industrial Ethernet, feature in conjunction with Industrial Ethernet networking model, after the authentication of transmitting terminal is passed through, the present invention also verifies the fail safe of data message by the industrial protocol information of data message, and described industrial protocol information comprises: industrial protocol type feature code and industrial protocol keyword;
Described the described industrial protocol information of extracting mated and comprised with each industrial protocol information of self preservation:
Extract the industrial protocol type feature code in described data message, by the described industrial protocol type feature code extracting, mate with each industrial protocol type feature code of self preserving; When the match is successful, extract the industrial protocol keyword in described data message; The described industrial protocol keyword extracting is mated with each industrial protocol keyword of self preserving; Or,
Extract the industrial protocol keyword in described data message; The described industrial protocol keyword extracting is mated with each industrial protocol keyword of self preserving, when the match is successful, extract the industrial protocol type feature code in described data message, by the described industrial protocol type feature code extracting, mate with each industrial protocol type feature code of self preserving.
Concrete, switching equipment is being verified sending the identity of other equipment of described message for the first time by key information and timestamp information, after the authentication for the second time of carrying out Hash operation with data message by after deciphering and having compared with cryptographic Hash that this message comprises, extract industrial protocol type feature code and the industrial protocol keyword of this data message, in the industrial protocol type feature code storehouse of preserving at self and industrial protocol key word library, mate respectively.Wherein, described industrial protocol type feature code comprises EtherCAT, Powerlink, IEC61850GOOSE, IEC61850SV, PROFinet, Modbus TCP and IEC61850MMS etc.
A kind of data safe transmission system structural representation based on Industrial Ethernet that Fig. 4 provides for the embodiment of the present invention, this system comprises:
Other equipment 41, for sending message to switching equipment, wherein said message comprises data message, its digital signature, timestamp information and key information;
Switching equipment 42, for extracting the timestamp information of described message, verifies this message, and according to the key information of preserving, this message is verified; When being verified, the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message; The rear cryptographic Hash obtaining of the cryptographic Hash of this data message and deciphering is compared; When judging that the cryptographic Hash of this data message and the cryptographic Hash of the rear acquisition of deciphering are consistent, extract the industrial protocol information in described data message; The described industrial protocol information of extracting is mated with each industrial protocol information of self preserving; When the match is successful, process this data message.
The structural representation of a kind of Security Data Transmission device based on Industrial Ethernet that Fig. 5 provides for the embodiment of the present invention, this device comprises:
Receiver module 51, the message sending for receiving other equipment, wherein said message comprises data message, its digital signature, timestamp information and key information;
Authentication module 52, for extracting the timestamp information of described message, verifies this message, and according to the key information of preserving, this message is verified; When being verified, the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message; The rear cryptographic Hash obtaining of the cryptographic Hash of this data message and deciphering is compared; When judging that the cryptographic Hash of this data message and the cryptographic Hash of the rear acquisition of deciphering are consistent, extract the industrial protocol information in described data message; The described industrial protocol information of extracting is mated with each industrial protocol information of self preserving;
Processing module 53, for when the match is successful, processes this data message.
Described authentication module 52, specifically for according to the source address information of described this message of Receive message, wherein this source address information comprises source IP information or source MAC information; According to described source address information and the address information of self, determine the link delay between equipment; According to the described timestamp information of described link delay, extraction, current receiving time information and the time threshold information of preservation, this message is verified.
Described authentication module 52, specifically for according to described link delay, the described timestamp information of extraction, determines the theoretical time that receives described message; Judge the described theoretical time, and whether the poor absolute value of current receiving time information is less than described time threshold information.
Described authentication module 52, specifically for extracting the industrial protocol type feature code in described data message, by the described industrial protocol type feature code extracting, mates with each industrial protocol type feature code of self preserving; When the match is successful, extract the industrial protocol keyword in described data message; The described industrial protocol keyword extracting is mated with each industrial protocol keyword of self preserving; Or, extract the industrial protocol keyword in described data message; The described industrial protocol keyword extracting is mated with each industrial protocol keyword of self preserving, when the match is successful, extract the industrial protocol type feature code in described data message, by the described industrial protocol type feature code extracting, mate with each industrial protocol type feature code of self preserving.
This device is arranged in receiving device.
The structural representation of a kind of Security Data Transmission device based on Industrial Ethernet that Fig. 6 provides for the embodiment of the present invention, this device comprises:
The first encrypting module 61, for according to data message to be sent, and the hash algorithm of preserving, determines the cryptographic Hash of this data white list;
The second encrypting module 62, for according to the private key of the cryptographic Hash of this data message of determining and self preservation, determines the digital signature of this data message;
Sending module 63, for according to current transmission time information, is carried at current timestamp in data, sends to other device together with this data message and digital signature thereof; Or according to the digital signature of this data message and definite this data message, the unsymmetrical key of adopt preserving is encrypted this data message and digital signature thereof, and the data message after encrypting and digital signature thereof are sent to other device after together with this asymmetric-key encryption.
This device is arranged in sending ending equipment.
The embodiment of the present invention provides a kind of data safe transmission method, system and device based on Industrial Ethernet, in the method, switching equipment receives the message that other equipment send, and wherein said message comprises data message, its digital signature, timestamp information and key information; Extract the timestamp information in described message, this message is verified, and according to the key information of preserving, this message is verified; When being verified, the PKI of preserving according to self is decrypted this digital signature, obtains its corresponding cryptographic Hash, and this data message is carried out to Hash operation, determines the cryptographic Hash of this data message; The rear cryptographic Hash obtaining of the cryptographic Hash of this data message and deciphering is compared; When judging that the cryptographic Hash of this data message and the cryptographic Hash of the rear acquisition of deciphering are consistent, extract the industrial protocol information in described data message; The described industrial protocol information of extracting is mated with each industrial protocol information of self preserving; When the match is successful, process this data message.Because the authorization information that switching equipment is preserved according to self is in embodiments of the present invention carried out Information Authentication to the data message receiving, and by the coupling identification of industrial protocol information, this data message is carried out to secondary checking, thereby reach the object that the fail safe of message data information is verified, therefore, the method has improved the fail safe of transfer of data in industrial network.
Those skilled in the art should understand, the application's embodiment can be provided as method, system or computer program.Therefore, the application can adopt complete hardware implementation example, implement software example or in conjunction with the form of the embodiment of software and hardware aspect completely.And the application can adopt the form that wherein includes the upper computer program of implementing of computer-usable storage medium (including but not limited to magnetic disc store, CD-ROM, optical memory etc.) of computer usable program code one or more.
The application is with reference to describing according to flow chart and/or the block diagram of the method for the embodiment of the present application, equipment (system) and computer program.Should understand can be in computer program instructions realization flow figure and/or block diagram each flow process and/or the flow process in square frame and flow chart and/or block diagram and/or the combination of square frame.Can provide these computer program instructions to the processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device to produce a machine, the instruction of carrying out by the processor of computer or other programmable data processing device is produced for realizing the device in the function of flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame appointments.
These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, the instruction that makes to be stored in this computer-readable memory produces the manufacture that comprises command device, and this command device is realized the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.
These computer program instructions also can be loaded in computer or other programmable data processing device, make to carry out sequence of operations step to produce computer implemented processing on computer or other programmable devices, thereby the instruction of carrying out is provided for realizing the step of the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame on computer or other programmable devices.
Although described the application's preferred embodiment, once those skilled in the art obtain the basic creative concept of cicada, can make other change and modification to these embodiment.So claims are intended to all changes and the modification that are interpreted as comprising preferred embodiment and fall into the application's scope.
Obviously, those skilled in the art can carry out various changes and modification and the spirit and scope that do not depart from the application to the application.Like this, if within these of the application are revised and modification belongs to the scope of the application's claim and equivalent technologies thereof, the application is also intended to comprise these changes and modification interior.