CN105978731B - A kind of method and device suitable for industrial intelligent meter information security protection - Google Patents

A kind of method and device suitable for industrial intelligent meter information security protection Download PDF

Info

Publication number
CN105978731B
CN105978731B CN201610461576.7A CN201610461576A CN105978731B CN 105978731 B CN105978731 B CN 105978731B CN 201610461576 A CN201610461576 A CN 201610461576A CN 105978731 B CN105978731 B CN 105978731B
Authority
CN
China
Prior art keywords
industrial intelligent
intelligent instrument
industrial
instrument
data packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201610461576.7A
Other languages
Chinese (zh)
Other versions
CN105978731A (en
Inventor
兰昆
唐林
赵婷
姚智雄
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Electronic Technology Cyber Security Co Ltd
Original Assignee
China Electronic Technology Cyber Security Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Electronic Technology Cyber Security Co Ltd filed Critical China Electronic Technology Cyber Security Co Ltd
Priority to CN201610461576.7A priority Critical patent/CN105978731B/en
Publication of CN105978731A publication Critical patent/CN105978731A/en
Application granted granted Critical
Publication of CN105978731B publication Critical patent/CN105978731B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0866Checking the configuration
    • H04L41/0869Validating the configuration within one network element
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Arrangements For Transmission Of Measured Signals (AREA)

Abstract

The invention discloses a kind of method and devices suitable for industrial intelligent meter information security protection, are related to technical field of industrial control, it is intended to fill up in existing industrial intelligent instrument management and be not present the defect of protecting information safety function.The technical solution adopted by the present invention is as follows, comprising: step 1: communicating with the foundation of industrial intelligent instrument;Step 2: sending read data packet instruction to industrial intelligent instrument;Step 3: receiving the data packet that industrial intelligent instrument returns;Step 4: parsing the data packet, extract the factory ID number and configuration information of industrial intelligent instrument therein;Step 5: by the allocating default information comparison of the configuration information and the industrial intelligent instrument prestored, when comparison result is not to be simultaneously emitted by alarm.

Description

A kind of method and device suitable for industrial intelligent meter information security protection
Technical field
It is especially a kind of suitable for industrial intelligent meter information security protection the present invention relates to technical field of industrial control Method.
Background technique
With " Chinese intelligence makes 2025 " development outline that " industry 4.0 " concept in 2013 and China in 2015 propose, it is based on The industrial intelligent instrument of information physical system is more and more applied in industrial control system, wherein most popular is to adopt With nearly all class such as the intelligence instrument of Hart agreement, including pressure transmitter, flowmeter, temperature transmitter and radar level gauge The Industry Control field instrument of type.
Hart agreement is to use the frequency shift keying technology based on Bell202 communication standard, defeated in instrument standard analog signal A frequency signal is superimposed in outlet to realize digital communication.Analog signal is digital to industrial control system transmission process variable Signal then provides other meter informations such as calibration, configuration, diagnosis.
Currently, the method for industrial intelligent instrument detection has the following two kinds:
(1) DCS system (industrial control system in industrial control network) is accessed with analog signal form;
(2) DCS system is accessed with digital signal form.
Wherein, industrial intelligent instrument is using the principle that analog quantity mode accesses DCS system: industrial intelligent instrument and Hart Handheld operation device is connected with signal, and industrial intelligent instrument is also communicated with DCS system.As shown in Figure 1.
Hart handheld operation device is that the traditional function and HART communication function of multifunctional check are combined together, both The normal procedure intelligent instrument check including voltage, electric current, thermocouple, pressure can be completed, can be provided for and all mainstream HART Intelligence instrument communication for the industrial intelligent instrument of maintenance support Hart communication protocol, and is completed all meter locale verifications and is adjusted Trial work is made.
Hart handheld operation device is for being corrected the output quantity of industrial intelligent instrument, and industrial intelligent instrument is to DCS Semaphore after system output calibration.
Industrial intelligent instrument is using the principle of digital signal access DCS system, in industrial intelligent instrument and DCS system Can store the server connection of data, the two communicated with Hart communication protocol, industrial intelligent instrument by output signal with The form of digital signal is exported to DCS system.The also engineer station's (PC machine etc.) being connected with server, is convenient for engineer It reads the data of industrial intelligent instrument and is analyzed and managed.As shown in Figure 2.
It can be seen that in existing industrial intelligent instrument management and protecting information safety function is not present.
Summary of the invention
The technical problems to be solved by the present invention are: in view of the above problems, providing a kind of suitable for industrial intelligent The method of meter information security protection.
The technical solution adopted by the present invention is as follows, comprising:
Step 1: being communicated with the foundation of industrial intelligent instrument;
Step 2: sending read data packet instruction to industrial intelligent instrument;
Step 3: receiving the data packet that industrial intelligent instrument returns;
Step 4: parsing the data packet, extract the factory ID number and configuration information of industrial intelligent instrument therein;
Step 5: the allocating default information comparison of the configuration information and the industrial intelligent instrument prestored is tied when comparing Fruit is not to be simultaneously emitted by alarm.
Further, the industrial intelligent instrument supports Hart communication protocol;
In step 1, communicated with industrial intelligent instrument according to Hart communication protocol;
In step 4, the data packet is parsed according to Hart communication protocol.
Further, in the step 5, when comparison result is the information security state of intelligence instrument not to be sent to pipe simultaneously Manage work station.
Further, the industrial intelligent instrument with the industrial control unit (ICU) in industrial control network there is signal to connect.
Further, the industrial intelligent instrument also with Hart handheld manipulator there is signal to connect.
The present invention also provides a kind of and one-to-one floppy disk systems of above method step.Comprising:
Communication unit, for being communicated with the foundation of industrial intelligent instrument;
Data packet request unit, for sending read data packet instruction to industrial intelligent instrument;
Data packet receiving unit, for receiving the data packet of industrial intelligent instrument return;
Configuration information acquiring unit extracts the factory ID number of industrial intelligent instrument therein for parsing the data packet And configuration information;
Safe condition detection unit, for believing the configuration information and the allocating default of the industrial intelligent instrument prestored Breath compares, when comparison result is not to be simultaneously emitted by alarm.
Further, the industrial intelligent instrument supports Hart communication protocol;
Communication unit with industrial intelligent instrument according to Hart communication protocol for being communicated;
Configuration information acquiring unit is used to parse the data packet according to Hart communication protocol.
Further, safe condition detection unit is also used to when comparison result be not simultaneously by the information security shape of intelligence instrument State is sent to management work station.
In conclusion by adopting the above-described technical solution, the beneficial effects of the present invention are:
The present invention is suitable for putting into the protecting information safety of industrial intelligence instrument, can parse the Hart of correlate meter Information data is suitable for a large amount of industrial intelligent instrument, realizes online acquisition, meter information to live Hart intelligence instrument information The functions such as safety state analysis analyze intelligence instrument information security state, provide intelligence instrument protecting information safety function, reduce Field instrument maintenance cost, safety improve the safety and reliability of industrial intelligent instrument.
Detailed description of the invention
Examples of the present invention will be described by way of reference to the accompanying drawings, in which:
Fig. 1 is the functional block diagram that industrial intelligent instrument accesses DCS system using analog quantity mode in the prior art.
Fig. 2 is the functional block diagram that industrial intelligent instrument accesses DCS system using digital quantity mode in the prior art.
Fig. 3 is the method for the present invention flow chart.
Specific embodiment
All features disclosed in this specification or disclosed all methods or in the process the step of, in addition to mutually exclusive Feature and/or step other than, can combine in any way.
Any feature disclosed in this specification unless specifically stated can be equivalent or with similar purpose by other Alternative features are replaced.That is, unless specifically stated, each feature is an example in a series of equivalent or similar characteristics ?.
As shown in figure 3, the method for the present invention may operate on a mobile intelligent terminal, such as tablet computer, notebook electricity Brain etc., one embodiment include:
Step 1: the method for the present invention operation terminal is communicated with the foundation of industrial intelligent instrument;
Step 2: sending read data packet instruction to industrial intelligent instrument;
Step 3: receiving the data packet that industrial intelligent instrument returns;
Step 4: parsing the data packet, extract the factory ID number and configuration information of industrial intelligent instrument therein.For , there are unique ID number and a some configuration informations in industrial intelligent instrument, when factory, these configuration informations are under normal circumstances not It can be modified, when there is network information security attack, these configuration informations can be modified.The present invention is exactly to pass through detection industry Whether the configuration information in intelligence instrument detects the information security state of the instrument with factory-default difference.
Step 5: terminal local be stored with each industrial intelligent instrument in scene ID number and its corresponding configuration information default value. After extracting the configuration information of a certain industrial intelligent instrument, the allocating default of itself and the industrial intelligent instrument prestored is believed Breath compares, when comparison result is not to be simultaneously emitted by alarm.
In a preferred embodiment, industrial intelligent instrument supports Hart communication protocol, actually most of industry at present Intelligence instrument is all to support Hart communication protocol.
In the step 1 of the present embodiment, terminal is communicated with industrial intelligent instrument according to Hart communication protocol;
In step 4, the data packet is parsed according to Hart communication protocol.
In another embodiment, step 5 further includes when comparison result is not simultaneously by the information security state of intelligence instrument It is sent to management work station.
Above-mentioned industrial intelligent instrument with the industrial control unit (ICU) DCS in industrial control network there is signal to connect, for that will count According to being transferred to DCS system.In general, industrial intelligent instrument also with Hart handheld operation device there is signal to connect.Hart hand The formula operator of holding can calibrate industrial intelligent instrumented data, the data that such industrial intelligent instrument is exported to DCS system It is more accurate.
The invention is not limited to specific embodiments above-mentioned.The present invention, which expands to, any in the present specification to be disclosed New feature or any new combination, and disclose any new method or process the step of or any new combination.

Claims (10)

1. a kind of method suitable for industrial intelligent meter information security protection characterized by comprising
Step 1: being communicated with the foundation of industrial intelligent instrument;
Step 2: sending read data packet instruction to industrial intelligent instrument;
Step 3: receiving the data packet that industrial intelligent instrument returns;
Step 4: parsing the data packet, extract the factory ID number and configuration information of industrial intelligent instrument therein;
Step 5: by the allocating default information comparison of the configuration information and the industrial intelligent instrument prestored, when comparison result is It is not simultaneously emitted by alarm.
2. a kind of method suitable for industrial intelligent meter information security protection according to claim 1, which is characterized in that The industrial intelligent instrument supports Hart communication protocol;
In step 1, communicated with industrial intelligent instrument according to Hart communication protocol;
In step 4, the data packet is parsed according to Hart communication protocol.
3. a kind of method suitable for industrial intelligent meter information security protection according to claim 1, which is characterized in that In the step 5, when comparison result is the information security state of intelligence instrument not to be sent to management work station simultaneously.
4. a kind of method suitable for industrial intelligent meter information security protection according to claim 1, which is characterized in that The industrial intelligent instrument with the industrial control unit (ICU) in industrial control network there is signal to connect.
5. a kind of method suitable for industrial intelligent meter information security protection according to claim 1, which is characterized in that The industrial intelligent instrument also with Hart handheld manipulator there is signal to connect.
6. a kind of device suitable for industrial intelligent meter information security protection characterized by comprising
Communication unit, for being communicated with the foundation of industrial intelligent instrument;
Data packet request unit, for sending read data packet instruction to industrial intelligent instrument;
Data packet receiving unit, for receiving the data packet of industrial intelligent instrument return;
Configuration information acquiring unit, for parsing the data packet, extracting the factory ID number of industrial intelligent instrument therein and matching Confidence breath;
Safe condition detection unit, for by the configuration information and the allocating default information ratio of the industrial intelligent instrument that prestores It is right, when comparison result is not to be simultaneously emitted by alarm.
7. a kind of device suitable for industrial intelligent meter information security protection according to claim 6, which is characterized in that The industrial intelligent instrument supports Hart communication protocol;
Communication unit with industrial intelligent instrument according to Hart communication protocol for being communicated;
Configuration information acquiring unit is used to parse the data packet according to Hart communication protocol.
8. a kind of device suitable for industrial intelligent meter information security protection according to claim 6, which is characterized in that Safe condition detection unit is also used to when comparison result be the information security state of intelligence instrument not to be sent to management work simultaneously It stands.
9. a kind of device suitable for industrial intelligent meter information security protection according to claim 6, which is characterized in that The industrial intelligent instrument with the industrial control unit (ICU) in industrial control network there is signal to connect.
10. a kind of device suitable for industrial intelligent meter information security protection according to claim 6, feature exist In the industrial intelligent instrument also with Hart handheld manipulator there is signal to connect.
CN201610461576.7A 2016-06-23 2016-06-23 A kind of method and device suitable for industrial intelligent meter information security protection Active CN105978731B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610461576.7A CN105978731B (en) 2016-06-23 2016-06-23 A kind of method and device suitable for industrial intelligent meter information security protection

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610461576.7A CN105978731B (en) 2016-06-23 2016-06-23 A kind of method and device suitable for industrial intelligent meter information security protection

Publications (2)

Publication Number Publication Date
CN105978731A CN105978731A (en) 2016-09-28
CN105978731B true CN105978731B (en) 2018-12-21

Family

ID=57022279

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610461576.7A Active CN105978731B (en) 2016-06-23 2016-06-23 A kind of method and device suitable for industrial intelligent meter information security protection

Country Status (1)

Country Link
CN (1) CN105978731B (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223403A (en) * 2011-06-03 2011-10-19 常州大学 Intelligent instrument online-diagnosis and management system based on wireless HART (Highway Addressable Remote Transducer) protocol
CN103970100A (en) * 2014-05-08 2014-08-06 浙江中烟工业有限责任公司 Multi-protocol reconfigurable bus-based instrument experiment system
CN103986570A (en) * 2014-04-10 2014-08-13 深圳清华大学研究院 Safe data transmission method of smart instrument system

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223403A (en) * 2011-06-03 2011-10-19 常州大学 Intelligent instrument online-diagnosis and management system based on wireless HART (Highway Addressable Remote Transducer) protocol
CN103986570A (en) * 2014-04-10 2014-08-13 深圳清华大学研究院 Safe data transmission method of smart instrument system
CN103970100A (en) * 2014-05-08 2014-08-06 浙江中烟工业有限责任公司 Multi-protocol reconfigurable bus-based instrument experiment system

Also Published As

Publication number Publication date
CN105978731A (en) 2016-09-28

Similar Documents

Publication Publication Date Title
CN104242465A (en) B/S based remote transformer substation monitoring system and method
CN103401930B (en) A kind of industrial monitoring method and device of sing on web Service
CN103200395B (en) A kind of intelligent newspapers barrier optical transmitter and receiver and network management client end system thereof
CN103175566B (en) A kind of system of calibrating sensors, device and method
CA3017632C (en) Nfc enabled wireless process communication gateway
CN105492978A (en) Transfer device for a measurement device and a method for transferring raw data using a transfer device
CN105208016A (en) Agricultural internet of things multi-data transmission and processing method
CN106656960A (en) Hilscher-based credible data acquisition system and method
CN105739461A (en) Power plant field monitoring system and method using QR code
CN110111523B (en) Fire control thing networking signal simulation transmission system
CN102780592A (en) Methods and systems for detecting compatibility issues within an electrical grid control system
US11736504B2 (en) Method and system to detect abnormal message transactions on a network
CN106777755B (en) Verification device and system for spacer layer locking logic
CN105978731B (en) A kind of method and device suitable for industrial intelligent meter information security protection
CN106302485A (en) OPC standard and the bi-directional conversion system of power remote agreement
Soon et al. Bluetooth embedded digital ammeter with Android app data logging
CN104135403B (en) A kind of distributed environment Monitoring Data transfer check method
CN104851273A (en) Intelligent measuring system based on network
US20080285461A1 (en) Method for remotely monitoring system
CN203827367U (en) Switch on-line monitoring device for digital transformer station
CN106500786A (en) The gas meter, flow meter of application Internet of Things propagated sensation module
CN107465716B (en) Network instrument system and method based on LXI bus
CN106373361B (en) Wireless collection transmission device and method
CN103533562B (en) Wireless sensor network node protocol conformance testing device and method
CN105471936A (en) Remote monitoring method and remote monitoring device for Internet-of-things equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant