CN104615122B - A kind of industry control signal detection system and detection method - Google Patents
A kind of industry control signal detection system and detection method Download PDFInfo
- Publication number
- CN104615122B CN104615122B CN201410753803.4A CN201410753803A CN104615122B CN 104615122 B CN104615122 B CN 104615122B CN 201410753803 A CN201410753803 A CN 201410753803A CN 104615122 B CN104615122 B CN 104615122B
- Authority
- CN
- China
- Prior art keywords
- signal
- data
- industry control
- real
- forecast model
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
Abstract
The invention discloses a kind of industry control signal detection system and detection method, including：Data acquisition module, the real-time status data of collecting device electrical characteristic；And it is connected to store the historical process data storehouse for the real-time status data that data collecting module collected arrives with data acquisition module；It is also including be connected with historical process data storehouse and set up the input of signal in electrical characteristic by the data in historical process data storehouse and export the signal process forecast model of corresponding relation；Signal process forecast model is according to the real-time input signal collected in data acquisition module, obtain predicting output signal, and the prediction output signal is sent to traffic filter, the traffic filter receive prediction output signal from signal process forecast model and data collecting module collected to real time output and be compared, if corresponding real time output is consistent with prediction output signal feature, regard as effectively can perform signal；It is on the contrary then regard as it is invalid refusal perform signal.
Description
Technical field
The invention belongs to industrial control system information security field, it particularly relates to a kind of detection system of industry control signal
System, more precisely, is related to a kind of detecting system of the signal of the trains such as high ferro, subway；The invention further relates to a kind of industry control letter
Number detection method.
Background technology
Train control system is the integrated of various signalling arrangements and subsystem and its auxiliary equipment.The system integration is that high ferro signal closes
One of key technology, it is directly connected to the security of system.Train control system functional requirement specification (FRS), system requirement specification (SRS)
It is the Main Basiss of the progress system integration with System-Interface-Specification (FIS).Current train control system is integrated lay particular emphasis on distinct device or
Interfacing between system, and signalling arrangement the interconnecting in the system of composition of unlike signal manufacturer.Due to these
Signalling arrangement and subsystem are that different times are developed and are added in train control system, so the row control system formed on this basis
System, it is non-disposable according to system engineering theory global design, it is difficult to play the overall advantage with system level of system.It is this simple
The integrated of superposing type lacks data sharing and fusion in system, lack mutually test and verify between each subsystem, coordinated signals
With logical constraint mechanism, lack the equipment complexs such as newly-increased radio communication and transponder utilization, lack and realize " event in system level
The overall planning of barrier-safety ".
Current signal maintenance works with troubleshooting, relies primarily on the networking of signal microcomputer monitoring system buildup and carries out in real time
Monitoring, but signal microcomputer monitoring system lays particular emphasis on results management, obvious deficiency in terms of process management be present, it is impossible to by prison
The collection for surveying data draws the conclusion of regularity, and although signal microcomputer monitoring equipment extensive use at the scene, but very
More still by manually the change of data is checked, in cases where an amount of data is large, manually to data correlation analyses and
Historical data comparative analysis can not be competent at.Although the various data of nearly all signalling arrangement are summarized, to signal data
Excavate and logic analysis, data sharing and fusion treatment are inadequate.Except signal microcomputer monitoring system has simple logic unit
Divide outside the exceeded alarm of electrical quantity, other side does not have the effect of real-time automatic alarm and monitoring signal system operation.
The content of the invention
The present invention is in order to solve problems of the prior art, there is provided a kind of industry control signal detection system.
In order to realize above-mentioned purpose, the technical scheme is that：A kind of industry control signal detection system, including：
Data acquisition module, the real-time status data of collecting device electrical characteristic；
And it is connected to store the history for the real-time status data that data collecting module collected arrives with data acquisition module
Process database；
Also include be connected with historical process data storehouse and set up electric spy by the data in historical process data storehouse
Property in signal input and output corresponding relation signal process forecast model；The signal process forecast model is according to data acquisition
The real-time input signal collected in module, obtain predicting output signal, and the prediction output signal is sent to
Traffic filter, the traffic filter receive prediction output signal and number from signal process forecast model
The real time output that is collected according to acquisition module is simultaneously compared, if corresponding real time output and prediction output signal feature
It is consistent, then regards as effectively can perform signal；It is on the contrary then regard as it is invalid refusal perform signal.
Preferably, the data acquisition module includes：
Digital data acquisition submodule, gather the digital information of industry control signal；
Analog acquisition submodule, gather the analog quantity information of industry control signal；
Logical signal gathers submodule, gathers the data message in industry control signal logic bus.
Preferably, in addition to traffic filter the accident analysis judgment models being connected.
Preferably, the signal process forecast model is established according to neutral net, SVMs or PCA methods.
Present invention also offers a kind of detection method of industry control signal, comprise the following steps：
Step S1：The real-time status data of data collecting module collected equipment electrical characteristic；And it is stored in historical process data
Storehouse；
Step S2：Using the data in historical process data storehouse as foundation, it is established that signal process forecast model；
Step S3：Input signal to be checked in real time is sent to signal process forecast model, and exports prediction output signal；
Step S4：Traffic filter will predict that output signal feature carries out uniformity contrast with real time output feature；
If corresponding real time output is consistent with prediction output signal feature, regard as effectively can perform signal；It is if corresponding defeated in real time
Go out signal and prediction output signal feature is inconsistent, then regard as invalid refusal and perform signal.
Preferably, also include after step s4：
Step S5：Invalid refusal is performed into signal and is uploaded to accident analysis judgment models, accident analysis judges diagnostic module
Accident analysis occurs and carried out for failure judgement.
Preferably, in the step S1, digital information, simulation in data collecting module collected equipment electrical characteristic
Data message in amount information, logic bus.
The detecting system and detection method of the present invention, the final output work(of subsystems from each industrial control system
It can detect and set out, by off-line training, believable one is carried out to the real time output and prediction output signal for being detected examining system
The contrast of cause property, system invasion and failure as caused by information security are found in time.Fundamentally information security is prevented to cause work
Industry control system safety, change the industrial control information traditional method puted prevention first safely, it is anti-with the result of function accuracy
To the method for backstepping, fundamentally solves the information security issue of industrial control system.
Brief description of the drawings
Fig. 1 is the theory diagram of detecting system of the present invention.
Fig. 2 is the workflow diagram of detection method.
Embodiment
In order that present invention solves the technical problem that, use technical scheme, obtain technique effect it can be readily appreciated that below
With reference to specific accompanying drawing, the embodiment of the present invention is described further.
With reference to figure 1, the invention provides a kind of industry control signal detection system, including：Data acquisition module 1, for gathering
The real-time status data of equipment electrical characteristic；The real-time shape of the electrical characteristic of hardware device in the data acquisition module acquisition system
State, the main voltage including equipment, electric current, frequency etc., these values can be acquired by PLC or DCS system, it is only necessary to
Train control system provides acquisition interface can.Currently preferred to be, the data acquisition module 1 includes digital data acquisition submodule
Block 10, analog acquisition submodule 11 and logical signal collection submodule 12.Wherein, digital data acquisition submodule 10 gathers number
Word amount information, such as switch closed condition；Analog acquisition submodule 11 gathers analog quantity information, such as voltage, electric current；Logic
Data message on the data acquisition bus of signal acquisition submodule 12 etc..
The industry control signal detection system of the present invention also includes being connected to store data acquisition module with data acquisition module 1
The historical process data storehouse 2 for the real-time status data that collection 1 is arrived；Data basis is provided for the foundation of following model.Also include with
It is that historical process data storehouse 2 connects and by the data in historical process data storehouse 2 set up in electrical characteristic signal input and
Export the signal process forecast model 3 of corresponding relation.
These data and output collected have corresponding relation, in this case, as long as providing substantial amounts of history number
According to signal process prediction module carries out off-line training modeling to it, can find out the relation between wherein input and output, use y=f
(x) represent, wherein y represents output quantity；X represents input variable.Y may have multiple output quantity y1, y2...ym；X may also have
Multiple input quantity x1, x2...xn.
By different types of historical data source, continuous, discrete, batch production process can be analyzed with rapid build model.
Data preparation, visual check data can be carried out, rule model can also be established.Show that the influence between parameters is closed
It is to predict the value of inconvenient measurement parameter, the offline or online optimal control of implementation, the knowledge excavated from these models,
Help is assessed the improved income of process, and whole process is also very simple and convenient, workload is seldom.Use this model system
System, the reason for production process fluctuates can be found out, and be adjusted, reached stabilized product quality, improve the target of yield.
The signal process forecast model 3 that input and output correspond to relation can be built by existing technology.Such as basis
Neutral net, SVMs or PCA methods.
Artificial neural network (Artificial Neural Networks, be abbreviated as ANNs) is also referred to as neutral net
(NNs) or link model (Connection Model) is made, it is a kind of imitation animal nerve network behavior feature, is divided
The algorithm mathematics model of cloth parallel information processing.This network relies on the complexity of system, by adjusting internal a large amount of sections
The relation being connected with each other between point, so as to reach the purpose of processing information.
The algorithm that neutral net is used is exactly vector multiplication, and widely used sign function and its various is approached.Parallel,
It is fault-tolerant, can be realized with hardware and self-teaching characteristic, be several principal advantages of neutral net, and neural computing side
Where the difference of method and conventional method.
Support vector machine method is built upon in the VC dimensions theory and Structural risk minization basis of Statistical Learning Theory
, according to limited sample information is in the complexity (the study precision i.e. to specific training sample) of model and learning ability is (i.e.
Identify the ability of arbitrary sample without error) between seek optimal compromise, in the hope of obtaining best Generalization Ability.
SVMs will be in DUAL PROBLEMS OF VECTOR MAPPING to the space of a more higher-dimension, and being established in this space has between a maximum
Every hyperplane.Two hyperplane parallel to each other are had on the both sides of the hyperplane of separated data.Direction is established suitably to separate
Hyperplane maximizes the distance between two hyperplane parallel with it.It is assumed to, distance or gap between parallel hyperplane
Bigger, the overall error of grader is smaller.
Principal component analysis (Principal Component Analysis, PCA) or pivot analysis.It is a kind of grasp thing
The statistical analysis technique of thing principal contradiction, it can parse major influence factors from polynary things, disclose the essence of things,
Simplify the problem of complicated.The purpose for calculating principal component is to project to high dimensional data compared with lower dimensional space.Give m of n variable
Observed value, forms n ' m data matrix, and n is generally bigger.If the main aspect of things is just embodied in several main
On variable, we only need to come out these separating variables, carry out labor.But in general, can not be straight
Connect and find out such key variables.At this moment we can represent the main aspect of things, PCA with the linear combination of original variable
It is exactly such a analysis method.
The industry control signal detection system of the present invention, the signal process forecast model 3 gather according in data acquisition module 1
The real-time input signal arrived, obtain predicting output signal, and the prediction output signal is sent to traffic filter 4, the letter
Number wave filter 4 receives prediction output signal from signal process forecast model 3 and data acquisition module 1 collect it is real-time
Output signal is simultaneously compared, if corresponding real time output is consistent with prediction output signal feature, regards as effectively holding
Row signal；It is on the contrary then regard as it is invalid refusal perform signal.
Accident analysis judgment models 5 that are currently preferred to be, in addition to being connected with traffic filter 4, when signal filters
When device 4 judges that real time output is not consistent with prediction output signal feature, the signal is transferred to accident analysis judgment models 5
In, accident analysis occurs and carried out for the failure judgement of accident analysis judgment models 5.Accident analysis judgment models 5 are carried out to data
Analysis, establishes operational model using neural Meta algorithm, finds out the various factors related to failure.Failure can be reported after occurring
Alert, user defines the rank of alarm according to the threshold value of data.Alert levels are divided into critical, advanced, intermediate, rudimentary, normal
State and unknown accident.
Present invention also offers a kind of detection method of industry control signal, with reference to figure 2, comprise the following steps：
Step S1：The real-time status data of data collecting module collected equipment electrical characteristic；And it is stored in historical process data
Storehouse；
Step S2：Using the data in historical process data storehouse as foundation, it is established that signal process forecast model；
Step S3：Input signal to be checked in real time is sent to signal process forecast model, and exports prediction output signal；
Step S4：Traffic filter will predict that output signal feature carries out uniformity contrast with real time output feature；
If corresponding real time output is consistent with prediction output signal feature, regard as effectively can perform signal；It is if corresponding defeated in real time
Go out signal and prediction output signal feature is inconsistent, then regard as invalid refusal and perform signal.
Preferably, also include after step s4：
Step S5：Invalid refusal is performed into signal and is uploaded to accident analysis judgment models, accident analysis judges diagnostic module
Accident analysis occurs and carried out for failure judgement.
Preferably, in the step S1, digital information, simulation in data collecting module collected equipment electrical characteristic
Data message in amount information, logic bus.
The detecting system and detection method of the present invention, the final output work(of subsystems from each industrial control system
It can detect and set out, by off-line training, believable one is carried out to the real time output and prediction output signal for being detected examining system
The contrast of cause property, system invasion and failure as caused by information security are found in time.Fundamentally information security is prevented to cause work
Industry control system safety, change the industrial control information traditional method puted prevention first safely, it is anti-with the result of function accuracy
To the method for backstepping, fundamentally solves the information security issue of industrial control system.
The present invention has carried out detailed explanation by preferred embodiment.However, by studying carefully above, to each
The change and increase of embodiment are obvious for those of ordinary skill in the art.It is intended that institute
These changes and increase having all fall in the scope that the claims in the present invention are protected.
Claims (7)
- A kind of 1. industry control signal detection system, it is characterised in that including：Data acquisition module, the real-time status data of collecting device electrical characteristic；And it is connected to store the historical process for the real-time status data that data collecting module collected arrives with data acquisition module Database；Also include be connected with historical process data storehouse and set up by the data in historical process data storehouse in electrical characteristic Signal inputs and the signal process forecast model of output corresponding relation；The signal process forecast model is according to data acquisition module In the real-time input signal that collects, obtain predicting output signal, and the prediction output signal is sent toTraffic filter, the traffic filter receive prediction output signal and data from signal process forecast model and adopted Collect the real time output that module collects and be compared, if corresponding real time output and prediction output signal feature phase Symbol, then regard as effectively can perform signal；It is on the contrary then regard as it is invalid refusal perform signal.
- 2. industry control signal detection system according to claim 1, it is characterised in that：The data acquisition module includes：Digital data acquisition submodule, gather the digital information of industry control signal；Analog acquisition submodule, gather the analog quantity information of industry control signal；Logical signal gathers submodule, gathers the data message in industry control signal logic bus.
- 3. industry control signal detection system according to claim 1, it is characterised in that：Also include what is be connected with traffic filter Accident analysis judgment models.
- 4. industry control signal detection system according to claim 1, it is characterised in that：The signal process forecast model according to Neutral net, SVMs or PCA methods are established.
- 5. a kind of detection method of industry control signal, it is characterised in that comprise the following steps：Step S1：The real-time status data of data collecting module collected equipment electrical characteristic；And it is stored in historical process data storehouse；Step S2：Using the data in historical process data storehouse as foundation, it is established that signal process forecast model；Step S3：Input signal to be checked in real time is sent to signal process forecast model, and exports prediction output signal；Step S4：Traffic filter will predict that output signal feature carries out uniformity contrast with real time output feature；It is if right Answer real time output to be consistent with prediction output signal feature, then regard as effectively can perform signal；If corresponding output letter in real time Number with prediction output signal feature it is inconsistent, then regard as it is invalid refusal perform signal.
- 6. detection method according to claim 5, it is characterised in that：Also include after step s4：Step S5：Invalid refusal is performed into signal and is uploaded to accident analysis judgment models, accident analysis judges that diagnostic module judges Accident analysis occurs and carried out for failure.
- 7. detection method according to claim 5, it is characterised in that：In the step S1, data collecting module collected is set The data message on digital information, analog quantity information, logic bus in standby electrical characteristic.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410753803.4A CN104615122B (en) | 2014-12-11 | 2014-12-11 | A kind of industry control signal detection system and detection method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410753803.4A CN104615122B (en) | 2014-12-11 | 2014-12-11 | A kind of industry control signal detection system and detection method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104615122A CN104615122A (en) | 2015-05-13 |
| CN104615122B true CN104615122B (en) | 2018-04-06 |
Family
ID=53149621
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410753803.4A Active CN104615122B (en) | 2014-12-11 | 2014-12-11 | A kind of industry control signal detection system and detection method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104615122B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106096789A (en) * | 2016-06-22 | 2016-11-09 | 华东师范大学 | A kind of based on machine learning techniques can be from the abnormal industry control security protection of perception and warning system |
| CN106202769A (en) * | 2016-07-15 | 2016-12-07 | 深圳市永达电子信息股份有限公司 | The industrial system detection method that a kind of on-line checking and simulation modeling checking combine |
| CN107728599B (en) * | 2017-09-01 | 2020-12-18 | 北京中燕信息技术有限公司 | Method and device for determining state of refining device valve |
| CN108900538B (en) * | 2018-08-09 | 2021-03-23 | 深圳市永达电子信息股份有限公司 | Industrial control signal detection method and device |
| CN110456272A (en) * | 2019-09-12 | 2019-11-15 | 国电联合动力技术有限公司 | A kind of test macro and test method of generating set complete machine security system |
| CN110579367A (en) * | 2019-09-23 | 2019-12-17 | 北京国电龙源环保工程有限公司 | Fault self-diagnosis system and method for drying bed |
| TWI709054B (en) * | 2019-12-05 | 2020-11-01 | 財團法人資訊工業策進會 | Building device and building method of prediction model and monitoring system for product quality |
| CN115208703B (en) * | 2022-09-16 | 2022-12-13 | 北京安帝科技有限公司 | Industrial control equipment intrusion detection method and system of fragment parallelization mechanism |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6892317B1 (en) * | 1999-12-16 | 2005-05-10 | Xerox Corporation | Systems and methods for failure prediction, diagnosis and remediation using data acquisition and feedback for a distributed electronic system |
| CN1240009C (en) * | 2003-06-19 | 2006-02-01 | 上海交通大学 | Method for apparatus status monitoring and performance degenerate fore casting based on network |
| CN201017232Y (en) * | 2006-11-23 | 2008-02-06 | 浙江大学 | Industry process non-linearity failure diagnosis device based on fisher |
| CN102063109B (en) * | 2010-11-29 | 2012-09-05 | 株洲南车时代电气股份有限公司 | Neural network-based subway train fault diagnosis device and method |
| CN102692537A (en) * | 2012-05-15 | 2012-09-26 | 辽宁省电力有限公司抚顺供电公司 | Electric quantity test instrument resetting method |
| CN103197634B (en) * | 2013-03-15 | 2015-05-06 | 上海大学 | Generating system and generating method of on-line prediction and on-line processing plan for automatic manufacturing and processing system |
-
2014
- 2014-12-11 CN CN201410753803.4A patent/CN104615122B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN104615122A (en) | 2015-05-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104615122B (en) | A kind of industry control signal detection system and detection method | |
| CN108628281B (en) | Abnormality detection system and abnormality detection method | |
| CN108604360B (en) | Facility abnormity monitoring method and system | |
| CN111368890A (en) | Fault detection method and device and information physical fusion system | |
| CN102361014B (en) | State monitoring and fault diagnosis method for large-scale semiconductor manufacture process | |
| CN109948860A (en) | A kind of mechanical system method for predicting residual useful life and system | |
| CN109886475B (en) | Information security situation perception system of measurement automation system based on AI | |
| CN106872657A (en) | A kind of multivariable water quality parameter time series data accident detection method | |
| CN108418841A (en) | Next-generation key message infrastructure network Security Situation Awareness Systems based on AI | |
| CN106950945B (en) | A kind of fault detection method based on dimension changeable type independent component analysis model | |
| CN107065834B (en) | The method for diagnosing faults of concentrator in hydrometallurgy process | |
| CN104615121B (en) | A kind of train fault diagnostic method and system | |
| CN113344134A (en) | Data acquisition abnormity detection method and system for low-voltage power distribution monitoring terminal | |
| WO2023065584A1 (en) | Method and apparatus for determining remaining service life of device, and electronic device | |
| CN108199891B (en) | Cps network attack identification method based on artificial neural network multi-angle comprehensive decision | |
| CN105634796A (en) | Network device failure prediction and diagnosis method | |
| CN115372816B (en) | Power distribution switchgear operation fault prediction system and method based on data analysis | |
| CN106096789A (en) | A kind of based on machine learning techniques can be from the abnormal industry control security protection of perception and warning system | |
| CN115642706A (en) | Power distribution load monitoring system in power grid | |
| CN113484749A (en) | Generator fault diagnosis and prediction method | |
| CN115358155A (en) | Power big data abnormity early warning method, device, equipment and readable storage medium | |
| CN115081647A (en) | Industrial intelligent instrument fault pre-diagnosis method based on Bayesian network model | |
| CN104573361B (en) | The method and apparatus that a kind of GIS device is assessed | |
| CN117216481A (en) | Remote monitoring method and system for electric appliance | |
| CN110298409A (en) | Multi-source data fusion method towards electric power wearable device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C53 | Correction of patent for invention or patent application | ||
| CB02 | Change of applicant information |
Address after: Three D301-309 room, building 518000, building D, Shenzhen Institute of Aerospace Science and technology, No. 6 South ten road, Nanshan District, Shenzhen, Guangdong, China Applicant after: Shenzhen Yongda electronic Touchplus information Corp Address before: Three D301-309 room, building 518000, building D, Shenzhen Institute of Aerospace Science and technology, No. 6 South ten road, Nanshan District, Shenzhen, Guangdong, China Applicant before: Shenzhen Rongda Electronics Co., Ltd. |
|
| COR | Change of bibliographic data |
Free format text: CORRECT: APPLICANT; FROM: SHENZHEN RONGDA ELECTRONICS CO., LTD. TO: SHENZHEN YONGDA ELECTRONIC INFORMATION CO., LTD. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |