CN106845219A - A kind of intrusion detection smart machine for multiple types of data - Google Patents

A kind of intrusion detection smart machine for multiple types of data Download PDF

Info

Publication number
CN106845219A
CN106845219A CN201710028126.3A CN201710028126A CN106845219A CN 106845219 A CN106845219 A CN 106845219A CN 201710028126 A CN201710028126 A CN 201710028126A CN 106845219 A CN106845219 A CN 106845219A
Authority
CN
China
Prior art keywords
interface
card
digital
module
board
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710028126.3A
Other languages
Chinese (zh)
Other versions
CN106845219B (en
Inventor
解仑
张雷
周育武
王志良
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yingtan Zhihui Internet Of Things Application Research Institute Co ltd
Original Assignee
University of Science and Technology Beijing USTB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by University of Science and Technology Beijing USTB filed Critical University of Science and Technology Beijing USTB
Priority to CN201710028126.3A priority Critical patent/CN106845219B/en
Publication of CN106845219A publication Critical patent/CN106845219A/en
Application granted granted Critical
Publication of CN106845219B publication Critical patent/CN106845219B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/552Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Small-Scale Networks (AREA)
  • Bus Control (AREA)

Abstract

The present invention provides a kind of intrusion detection smart machine for multiple types of data, and multiple types of data can be performed intrusion detection.The equipment includes:Backboard, mainboard module, CAN&AD cards, digital I/O card, encryption and decryption card, rear input/output interface board and power module;Wherein, the backboard supports compact PCI agreements;The rear input/output interface board, for providing polytype input/output interface, wherein, polytype input/output interface includes:Encryption and decryption card interface, network interface, RS232 serial line interfaces, USB interface, CAN interface, AD interfaces and digital I/O interface, each type of input/output interface, the data for obtaining respective type in real time;The mainboard module, for according to default inbreak detection rule, the data to obtaining to be performed intrusion detection;The encryption and decryption card, for the data do not invaded to be carried out with encryption and decryption and digital authentication processing.The present invention is applied to modern industry control and field of information security technology.

Description

Intrusion detection intelligent equipment for multiple types of data
Technical Field
The invention relates to the technical field of modern industrial control and information security, in particular to intrusion detection intelligent equipment aiming at various types of data.
Background
In recent years, interconnection between intelligent devices for realizing intrusion detection of various types of data and an industrial information control network has become an important component of modern industrial systems, and the intelligent detection and communication devices have functions of various communication interfaces. When the peripheral information network is interconnected with the control network of the intelligent communication equipment, how to ensure the data safety and the machine instruction safety of the industrial process control network becomes a serious problem due to the uncertainty and the uncontrollable property of the network. In particular, for the production and infrastructure industries of ferrous metallurgy, petrochemical industry, energy power, cement, etc., there are extremely high demands on the safety and reliability of continuous production, and if interconnection with an industrial control network via an open network is required, it is equivalent to exposing the control network directly to an information network and thus risking attack. Moreover, due to the particularity of industrial field equipment, once a fault occurs, the damage of manpower, material resources and property can be generated, and the social influence which is extremely harmful can be generated.
In modern industrial and data communication, the degree of intelligence is higher and higher, and various communication data control systems composed of intelligent equipment are widely applied to aerospace, engineering control, environment, power grids, medical equipment, communication and daily life and work of people. The CAN bus data of the industrial-grade CAN card is transmitted and received by a CAN Controller and a CAN transceiver. The functional card of the interface is widely applied in the industries of automobiles and the like, and is rapidly developed in the fields of industrial control, robots, medical instruments, sensors and the like. The AD signal acquisition function and the digital signal IO function are also widely applied in reality, and in order to acquire various information of the industrial field device, for example, acquire AD signal voltage data, digital input/output parameters, serial UART signal communication, and use a CAN bus with a high integration level, encryption and decryption processing are also required.
Disclosure of Invention
The invention aims to provide an intelligent intrusion detection device for various types of data, and solves the problem that no device integrating a CAN interface, an AD interface, a digital IO interface and encryption and decryption functions exists in the prior art.
To solve the above technical problem, an embodiment of the present invention provides an intrusion detection intelligent device for multiple types of data, including: the back board, a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module which are connected with the back board; wherein the backplane supports the compact PCI protocol;
the rear input/output interface board is configured to provide multiple types of input/output interfaces, where the multiple types of input/output interfaces include: the system comprises an encryption and decryption card interface, a network interface, an RS232 serial interface, a USB interface, a CAN interface, an AD interface and a digital IO interface, wherein each type of input and output interface is used for acquiring data of a corresponding type in real time;
the CAN & AD card is used for communicating with the CAN interface and the AD interface through the backboard;
the digital IO card is used for communicating with the digital IO interface through the backboard;
the mainboard module is used for carrying out intrusion detection on the acquired data according to a preset intrusion detection rule;
the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on data which is not invaded;
the power module is used for supplying power to the back plate.
Furthermore, the mainboard module, the CAN & AD card, the digital IO card, the encryption and decryption card, the rear input and output interface board and the power supply module are in plug-in connection with the back plate through the pinhole type connector;
the main board module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power supply module are positioned on the front side of the back board, and the rear input and output interface board is positioned on the rear side of the back board.
Further, the input and output interfaces of the plurality of types include: 1-path security card interface, 2-path network interface, 2-path RS232 serial interface, 6-path USB interface, 2-path CAN interface, 10-path AD interface and 24-path digital IO interface.
Further, the CAN & AD card includes: the device comprises a first conversion module and a first interface expansion module;
the first conversion module is used for converting the PCI bus into a local bus, wherein the local bus is connected with the first interface expansion module;
the first interface extension module is used for extending a plurality of paths of CAN signals and a plurality of paths of AD signals, wherein the plurality of paths of CAN signals and the plurality of paths of AD signals are connected to the rear input and output interface board through the backboard, and the rear input and output interface board provides a plurality of paths of CAN interfaces and a plurality of paths of AD interfaces.
Further, the digital IO card includes: the second conversion module and the second interface expansion module;
the second conversion module is configured to convert the PCI bus into a local bus, where the local bus is connected to the second interface expansion module;
the second interface expansion module is configured to expand multiple paths of IO signals, where the multiple paths of IO signals are connected to the rear input/output interface board through the backplane, and the rear input/output interface board provides multiple paths of digital IO interfaces;
each path of digital IO interface in the multiple paths of digital IO interfaces can be independently configured to be an output interface or an input interface.
The equipment further comprises a first network port expansion module connected with the back plate and a network port transformer connected with the first network port expansion module;
the first network port expansion module and the network port transformer connected with the first network port expansion module are used for expanding a first path of network port;
and the first network port is used for inputting and outputting network data.
Further, the apparatus further comprises: the second network port expansion module is connected with the back plate;
the second network port expansion module is used for expanding a second network port;
and the second router port is used for inputting and outputting network data.
Further, the apparatus further comprises: an AC filter connected to the back plate;
the alternating current filter is used for filtering 220V alternating current.
Further, the input/output interfaces of the plurality of types further include: a display port;
and the display port is used for accessing the liquid crystal display.
Further, the apparatus further comprises: the standby board card is connected with the back plate; wherein,
the spare board card comprises: one or more of RS232 serial interface card, video and audio synthesis card, 1553B bus card, 3U card based on compact PCI bus and 6U card based on compact PCI bus.
The technical scheme of the invention has the following beneficial effects:
in the above scheme, based on the network port, the RS232 serial interface, the USB interface, the CAN interface, the AD interface, and the digital IO interface provided by the rear input/output interface board, various types of data such as AD, CAN, and digital quantity CAN be acquired in real time, and intrusion detection is performed on the acquired various types of data in real time by using the motherboard module according to a preset intrusion detection rule; and the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on the data which is not invaded, thereby realizing the diversity of the data and ensuring the safety and the reliability of the data.
Drawings
Fig. 1 is a schematic structural diagram of an intrusion detection intelligent device for multiple types of data according to an embodiment of the present invention;
fig. 2 is a detailed structural diagram of an intrusion detection intelligent device for multiple types of data according to an embodiment of the present invention;
fig. 3 is a basic schematic diagram of a function board card of an intelligent intrusion detection device according to an embodiment of the present invention;
FIG. 4 is a schematic diagram of the internal and external connections of a PCI9054 chip according to an embodiment of the present invention;
fig. 5 is a circuit block diagram for realizing the function of the digital IO board card according to the embodiment of the present invention;
fig. 6 is a connection block diagram of an intrusion detection intelligent device peripheral system according to an embodiment of the present invention.
Detailed Description
In order to make the technical problems, technical solutions and advantages of the present invention more apparent, the following detailed description is given with reference to the accompanying drawings and specific embodiments.
The invention provides intrusion detection intelligent equipment for various types of data, aiming at the problem that no equipment integrating a CAN interface, an AD interface, a digital IO interface and an encryption and decryption function exists at present.
As shown in fig. 1, an intrusion detection intelligent device for multiple types of data according to an embodiment of the present invention includes: the back board, a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module which are connected with the back board; wherein the backplane supports the compact PCI protocol;
the rear input/output interface board is configured to provide multiple types of input/output interfaces, where the multiple types of input/output interfaces include: the system comprises an encryption and decryption card interface, a network interface, an RS232 serial interface, a USB interface, a CAN interface, an AD interface and a digital IO interface, wherein each type of input and output interface is used for acquiring data of a corresponding type in real time;
the CAN & AD card is used for communicating with the CAN interface and the AD interface through the backboard;
the digital IO card is used for communicating with the digital IO interface through the backboard;
the mainboard module is used for carrying out intrusion detection on the acquired data according to a preset intrusion detection rule;
the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on data which is not invaded;
the power module is used for supplying power to the back plate.
The intrusion detection intelligent equipment for various types of data, provided by the embodiment of the invention, CAN acquire various types of data such as AD, CAN, digital quantity and the like in real time based on the network port, the RS232 serial interface, the USB interface, the CAN interface, the AD interface and the digital IO interface which are provided by the rear input and output interface board, and carry out intrusion detection on the acquired various types of data in real time by utilizing the mainboard module according to the preset intrusion detection rule; and the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on the data which is not invaded, thereby realizing the diversity of the data and ensuring the safety and the reliability of the data.
In this embodiment, the back board, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, and the rear input/output interface board all support and use the compact PCI protocol, where the CAN & AD card may be an industrial-grade CAN & AD card. In this embodiment, as shown in fig. 1 and fig. 2, the intrusion detection smart device provides a plurality of card slots, where the card slots include: the system comprises a system groove, an equipment groove and a power supply groove, wherein the system groove is used for inserting the mainboard module, the equipment groove is used for inserting the CAN and AD card, the digital IO card and the encryption and decryption card, and the power supply groove is used for inserting the power supply module.
In this embodiment, the motherboard module may be a COM-E (COM express) core board, on which a customized kylin Linux system may be run, and the customized kylin Linux system is configured to reasonably tailor an original kylin Linux kernel system according to intrusion detection rules of various types of data, so that stability, reliability, and low hardware power consumption of the tailored kylin Linux system are ensured, and various types of transmission communication protocols such as CAN, USB, AD, and IO are provided, thereby realizing reliable and efficient transmission of data, and supporting conversion of various communication protocols; wherein, the CPU of the COM-E core board isThe (Intel) i7-4650U processor has the highest operation main frequency of 3.3GHz and the operation temperature range of-40 to +95 ℃, and meets the requirement of an environment with larger temperature difference in industrial field storage under special conditions; the CPU of the COM-E core board is provided with a 16GB DDR3 internal memory; the butting connector of the upper board of the main board module uses a 440pin patch mode; the mainboard module and the CAN&The AD card, the digital IO card, the encryption and decryption card, the rear input and output interface board and the power supply module are peripheral expansion interface boards for realizing the COM-E core board.
In this embodiment, the intrusion detection intelligent device CAN support multiple communication modes such as RS232, RS485, CAN, AD, digital IO, USB, and the like, and CAN simultaneously communicate EtherCAT, UDP, NetBEUI protocols and RS232, RS485, CAN, AD, and digital IO signals; the rear input/output interface board comprises input/output interfaces of various protocols such as EtherCAT, UDP, NetBEUI and the like; the input-output interface may include, but is not limited to: the system comprises a 1-path encryption and decryption card interface, a 2-path optical fiber gigabit network interface, a 2-path RS232 serial interface, a 6-path USB interface, a 2-path CAN interface, a 10-path AD interface and a 24-path digital IO interface; the intrusion detection intelligent equipment can acquire different types of data based on various types of input and output interfaces on the rear input and output interface board, and can carry out intrusion detection on the acquired various types of data, so that the intrusion detection intelligent equipment has comprehensive functions.
In this embodiment, because the intrusion detection smart device is provided with a CAN interface, an AD interface, a digital IO interface and a network interface, other devices (for example, industrial field devices and/or an upper computer) may be connected and communicated with the intrusion detection smart device through a CAN signal line, an AD signal line, an IO signal line and/or a network line, for example, the intrusion detection smart device may realize AD signal acquisition of data such as direct current voltage and acquisition of a two-way CAN signal through an ISOEM-U5-P2-O7 isolator and an AD7328BRUZ-TSSOP20 chip, and may realize Input and Output (IO) of digital quantity via a digital card.
In this embodiment, the intrusion detection smart device and other devices (e.g., industrial field devices and/or upper computers) may form a system.
In this embodiment, the data may be various types of data generated by behaviors of internal and external users and system activities, and the specific step of performing intrusion detection on the acquired data may include: analyzing and detecting various types of data generated by the behaviors of internal and external users and system activities through the mainboard module, analyzing the defects and the vulnerability of equipment or a system, and specifying a pertinence detection rule by combining protocol characteristics; identifying attack behaviors and abnormal behaviors according to Snort detection rules, and responding; and carrying out system resource and data integrity evaluation on other equipment and control models of the other equipment, monitoring system logs, and storing access records and attack footprints. And then, the data which is not invaded is encrypted, decrypted and digitally authenticated through the encryption and decryption card, so that the safe transmission of the data is realized, and the diversity of the data is realized through the network port, the CAN interface, the USB3.0 interface, the AD interface and the digital IO interface.
In this embodiment, the encryption and decryption board card is provided with an FPGA chip to undertake the calculation task of the encryption and decryption algorithm, and hardware encryption and decryption operations are realized, so that the encryption and decryption operations basically do not occupy CPU resources on the motherboard module, and the encryption and decryption speeds of various types of data such as direct-current voltage, current, torque, rotation speed, and the like can be ensured.
In this embodiment, when the encryption/decryption card performs encryption/decryption and digital authentication on data that is not invaded, instead of performing encryption/decryption and digital authentication on data that is not invaded by using a pure software method, specifically, when the data is input, the encryption/decryption card performs encryption and digital authentication on the input data through an encryption algorithm, and when the data is output, the encryption/decryption card performs decryption and digital authentication on the data by using a decryption algorithm corresponding to the encryption algorithm; the encryption and decryption card can comprise a Tang telecommunication encryption chip and an FPGA chip, supports a compact PCI protocol, abandons a traditional golden finger connection mode and adopts a pin hole connector plugging mode, and has high density and high reliability.
In this embodiment, the motherboard module may further update the encryption and decryption algorithms in the encryption and decryption card, thereby further ensuring the security of industrial-level data communications of multiple types.
In this embodiment, if the input/output interface includes 2 ways of optical fiber gigabit net mouths, 2 ways of RS232 serial interfaces, 6 ways of USB interfaces, 2 ways of CAN interfaces, 10 ways of AD interfaces and 24 ways of digital IO interfaces, then intrusion detection smart device CAN simultaneously carry out intrusion detection and storage to the data of 2 ways of optical fiber gigabit net mouths, 2 ways of RS232 serial interfaces, 6 ways of USB interfaces, 2 ways of CAN interfaces, 10 ways of AD interfaces and 24 ways of digital IO interfaces.
In this embodiment, the backplane supports a compact PCI protocol, and the compact backplane abandons a traditional gold finger connection mode and adopts a pin jack connector plugging mode, so that the backplane has high density and high reliability; because the backplane supports the compact PCI protocol, the backplane may be referred to as a compact PCI backplane, according to the compact PCI protocol, only functions are implemented on functional boards (e.g., a motherboard module, a CAN & AD card, a digital IO card, and an encryption/decryption card) in front of the backplane without an external interface, when signals are output externally, all signals are relayed and transmitted by the backplane and then output via the external interface on a rear input/output interface board, as exemplified by a CAN interface, where the CAN & AD card includes: the CAN card realizes two paths of CAN signals through an expansion chip, and needs to be provided with two paths of CAN ports on a rear input/output interface board through the relay of a backboard.
In this embodiment, in order to expand the function of the CAN bus, a CAN card having a magnetic isolation CAN interface and a compact PCI protocol is designed, the CAN card CAN use ADM-3053 and CTM1051A-3.3V chips to implement a magnetic isolation technique, and the CAN card collects information of each node on the CAN bus, forwards the information to the host computer, and CAN forward commands and data of the host computer to each node and complete partial monitoring and management work of a user system on the CAN bus.
In the embodiment, the CAN card board carries two CAN controllers, the two CAN controllers carried by the CAN card board are placed at different positions of the CAN card, and the two CAN controllers CAN be independently executed in a controller area network; the two CAN controllers are magnetically isolated, and the two magnetically isolated CAN cards are controller local area networks which provide online capability for computers, have automatic transmission repeating function and provide bus arbitration and error detection capability, so that the probability of data loss CAN be greatly reduced, and the reliability of the system is ensured.
In the foregoing specific implementation manner of the intrusion detection intelligent device for multiple types of data, further, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, the rear input/output interface board, and the power supply module are connected to the backplane by pin-and-socket connectors;
the main board module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power supply module are positioned on the front side of the back board, and the rear input and output interface board is positioned on the rear side of the back board.
In this embodiment, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, and the power module are located on the front side of the backplane, and are key board cards for implementing intrusion detection, and the board cards located on the front side of the backplane may be referred to as front side board cards; the rear input/output interface board is positioned at the rear side of the back plate, and the board card positioned at the rear side of the back plate can be called as a rear side board card; the back plate is used for relaying the front side board card and the rear side board card, the back plate is used for realizing relay connection with the front side board card and the rear side board card, and protocol conversion and data transmission of an interface are completed; the back plate, the front side and the rear side of each plate are clamped in the intelligent intrusion detection equipment to form a vertical plugging relation through the pinhole type connectors; for example, the mainboard module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power module CAN be connected with the back plate in a front-to-back manner through an intensive european pin hole connector with a height of two millimeters, so that power and signal intercommunication among the boards is realized; the back plate is connected with the rear input and output interface board in a plug-in mode from the back side of the back plate through three connectors of J1/J4, J2/J5 and J3. Signals are generated by the board cards in the front, are connected and relayed by the backboard, and are output by the corresponding interfaces on the rear input/output interface board, so that the transmission and connection of a power supply and the signals are realized in the intrusion detection intelligent equipment in a high-density and high-reliability European-type pinhole connector interconnection mode, and the reliability of the whole equipment can be improved.
In the foregoing specific embodiment of the intrusion detection smart device for multiple types of data, further, the CAN & AD card includes: the device comprises a first conversion module and a first interface expansion module;
the first conversion module is used for converting the PCI bus into a local bus, wherein the local bus is connected with the first interface expansion module;
the first interface extension module is used for extending a plurality of paths of CAN signals and a plurality of paths of AD signals, wherein the plurality of paths of CAN signals and the plurality of paths of AD signals are connected to the rear input and output interface board through the backboard, and the rear input and output interface board provides a plurality of paths of CAN interfaces and a plurality of paths of AD interfaces. In this embodiment, the CAN & AD card includes: a first conversion module and a first interface extension module, that is, the first conversion module and the first interface extension module are components of a CAN & AD card that converts a PCI bus into a local bus (the local bus may also be referred to as a local bus) using a first conversion module that may include: the PCI9054 chip is used for converting a PCI bus into a local bus, and the EEPROM chip stores configuration information of the PCI9054 chip for a long time after an instruction is cured; the local bus is connected with a first interface extension module (wherein, the first interface extension module CAN be an STM32F207ZGT6 chip) and extends 10 paths of AD signals and 2 paths of CAN signals, the extended 10 paths of AD signals and 2 paths of CAN signals are connected to a rear input and output interface board through a backboard, the rear input and output interface board externally provides 10 paths of AD interfaces and 2 paths of CAN interfaces, and the STM32F207ZGT6 chip needs a J-Link tool and Keil5.0 software for program solidification.
In this embodiment, as shown in fig. 3, the PCI bus is connected to the logic control and processing circuit on the board card through circuit conversion and a local bus to complete the control of the interface to the board card and the input and output of signals, the logic control and processing circuit meets the function requirement of the board card, completes the functions of address decoding, data format conversion, logic control, and the like, and simultaneously performs the control of the peripheral function circuit and the driving circuit and the input and output of signals, wherein the logic control and processing circuit may be implemented by an FPGA device.
As shown in FIG. 4, the compact PCI bus interface control logic implements the interface between the PCI9054 chip and the 64bit, 66.6MHz PCI bus; the local bus interface control logic is connected with the PCI9054 chip. The internal resources of the PCI9054 chip comprise a PCI configuration internal register, local bus control logic and a pair of read-write FIFOs, and are used for configuring a system and connecting a PCI bus and the local bus. The internal logic of the PCI9054 chip consists of a serial EEPROM controller and FIFO control logic, wherein the serial EEPROM controller is used for loading the value of the configuration register from an optional external serial EEPROM, and the FIFO control logic is used for controlling reading and writing of the FIFO and coordinating the compact PCI bus and the local bus. The JTAG interface is used for debugging circuits through Keil5.0 software and programs, and the programs are solidified into the card of the invention through the interface.
The local/local bus of the PCI9054 chip has two working MODEs (MODE): a non-multiplexing mode and a multiplexing mode. In the non-multiplexing MODE, the PCI9054 employs the non-multiplexing MODE when the MODE input is low, and conversely employs the multiplexing MODE when the MODE input is high. In multiplex mode, LA [27:2] is used to transmit addresses, LAD [63:32] is a 64-bit address/data multiplexed bus; in non-multiplexing mode, LA [27:2] is the address bus and LD [63:32] is the data bus.
For a better understanding of the present embodiment, the compact PCI bus signals are illustrated:
the compact PCI bus signal completes the time sequence conversion of the bus, so that the intrusion detection intelligent equipment CAN control the functional circuits of various components (a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module). In this embodiment, the design of the CAN & AD card and the digital IO card is completed by using an interface scheme of a PCI9054 chip plus an FPGA. A PCI9054 chip produced by PLX company is used as a PCI controller, and an FPGA of Altera company is used for carrying out read-write logic and compact PCI expansion function design.
In the embodiment, the PCI9054 is an interface chip with 32/64 bits and 33/66MHz frequency, and can enable the fastest transmission speed of a PCI signal to reach 264 MB/s; support multiplexing and non-multiplexing 32/64 bit address or data protocol of the local bus, and support 8 bit, 16 bit and 32 bit operation of the dynamic local bus, the local clock can reach 66.6MHz at most; support 5 PCI to local address space mappings, each space allowing for separate programming of wait states, bus widths, and burst transfer functionality; the V2.2 version specification of compact PCI power management is supported; the PCI expansion and PCI target pre-reading mode of the key Product Data (VPD) is supported, so that the bandwidth can be increased, and the reading delay can be reduced; the PCI9054 chip has 9 programmable general purpose I/O chips and can be used for multiple purposes; hot plugging of compact PCI is supported; its power supply supports DC3.3V and 5V voltage tolerant operation and has an optional serial EEPROM interface.
The compact PCI bus has excellent performance, can quickly transmit various types of data by adopting the European pin jack connector, has very deep interface logic, is difficult to realize by using an FPGA at the initial development stage of the bus, has low reliability, and generally adopts a special PCI interface chip to realize the interface function of the compact PCI, thereby being a very effective and reliable design realization method.
In this embodiment, the FPGA device of ALTERA corporation, its development environment, and the tool quitus ii12.0 are used, which is a high-density asic that can be defined and configured by the user in the field according to the requirements of the designed digital system. The design module can realize the design of a digital system with large-scale logic gates under the support of FPGA development system software.
The major advantages of the FPGA can be summarized as the following three parts:
the field programmable characteristic of the FPGA greatly shortens the design period, and a designer can provide a sample plate which is quickly realized in the field in a short time.
The FPGA can provide effective logic capacity density which is much larger than that of EPLD and CPLD devices, thereby greatly reducing the space of a printed circuit board, greatly reducing the power consumption of a system, and simultaneously greatly improving the process realizability of system design and the reliability of products.
The FPGA device can be erased and written by heat and programmed repeatedly, and can be directly simulated in the development process without loss of process realization.
In a specific implementation manner of the foregoing intrusion detection smart device for multiple types of data, further, the digital IO card includes: the second conversion module and the second interface expansion module;
the second conversion module is configured to convert the PCI bus into a local bus, where the local bus is connected to the second interface expansion module;
the second interface expansion module is configured to expand multiple paths of IO signals, where the multiple paths of IO signals are connected to the rear input/output interface board through the backplane, and the rear input/output interface board provides multiple paths of digital IO interfaces;
each path of digital IO interface in the multiple paths of digital IO interfaces can be independently configured to be an output interface or an input interface.
In this embodiment, the digital IO card converts the PCI bus into the local bus using a second conversion module, where the second conversion module may include: the PCI9054 chip is used for converting a PCI bus into a local bus, and the EEPROM chip stores configuration information of the PCI9054 chip for a long time after an instruction is cured; the local bus is connected with a second interface expansion module (wherein the second interface expansion module can be an EP1C3T144C8N chip carried by a digital IO card board) and expands 24 paths of IO signals, the expanded 24 paths of IO signals are connected to a rear input and output interface board after passing through a backboard, and the rear input and output interface board provides 24 paths of digital IO interfaces to the outside, wherein the EP1C3T144C8N chip carried by the digital IO card board is loaded and an FPGA program is compiled by software, and a USB Blaster emulator and QuartusII12.0 software are required to be used for program solidification.
In this embodiment, the 24 paths of digital IO interfaces are used to provide 24 paths of TTL digital input/output IO ports, and each group of IO ports may be independently configured as an output port or an input port.
In this embodiment, as shown in fig. 5, a functional circuit block diagram of a digital IO card is shown, an HCPL2631 device is used as a 10MHz optical coupler, and SG2003J/883b is used as a driving circuit. The digital output is subjected to a driving circuit, high voltage is pulled to 26VDC, and power of 26V is supplied by a peripheral direct current power supply. When an application program sets a certain path of output signal, the corresponding register of the path is set through the driving interface function, the FPGA outputs a corresponding signal according to the set value of the register, and the corresponding signal is changed into a 26VDC signal or a 0VDC signal through the driving circuit.
In this embodiment, the input of digital quantity inserts to 10MHz opto-coupler HCPL2631 chip behind the current-limiting resistor, when input signal voltage is 14.9V ~ 26.1V for direct current, the opto-coupler switches on, can output a corresponding High state, when input signal is direct current 0V ~ 0.81V, the opto-coupler does not switch on, output another kind of corresponding Low state this moment, the output line of opto-coupler is connected to FPGA device EP2C8Q208C8N, FPGA internal logic can judge the High or Low state of input signal according to two kinds of states of opto-coupler, place the input state of this way digital quantity in the corresponding register. When the application program needs to read the state of the channel, a driving interface function needs to be called, the digital quantity fast switching and state conversion are achieved through a chip ULN2803AFWG and an industrial relay JRC-089M-002-05-II, the driving interface function returns the state of the digital quantity input signal of the channel, the returned state is transmitted to acquisition software, and the digital IO card function is achieved after the returned state is analyzed and processed through the software.
In the specific implementation of the intelligent intrusion detection device for multiple types of data, the device further comprises a first network port expansion module connected with the backplane and a network port transformer connected with the first network port expansion module;
the first network port expansion module and the network port transformer connected with the first network port expansion module are used for expanding a first path of network port;
and the first network port is used for inputting and outputting network data.
In this embodiment, the first network port expansion module connected to the back plate may beThe ICH9M network chip, the network port transformer can be IMG \ M1801IG chip;the ICH9M network chip is connected to a network port transformer IMG \ M1801IG and extends a network port, wherein the network port may be an optical fiber network port.
In this embodiment, two optical fiber network ports can implement fast Ethernet input and output of network data, support Ethernet and Internet transmission standards, and signal transmission supports standard TCP/IP, EtherCAT and UDP protocols.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: the second network port expansion module is connected with the back plate;
the second network port expansion module is used for expanding a second network port;
and the second router port is used for inputting and outputting network data.
In this embodiment, the second port expansion module expands the other optical fiber port with one PCIE X4 signal, so that Ethernet fast input and output of network data can be realized through the two optical fiber ports, Ethernet and Internet transmission standards are supported, and signal transmission supports standard TCP/IP, EtherCAT, and UDP protocols.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: an AC filter connected to the back plate;
the alternating current filter is used for filtering 220V alternating current.
In this embodiment, as shown in fig. 2, the apparatus further includes: an AC filter connected to the back plate; the 220V alternating current of the mains supply is filtered by the alternating current filter and then is led into the power supply module through the backboard, and the reliable European power supply connector female head is used on the power supply module and is connected with the European power supply connector male head on the backboard in a plug-in mode.
In a specific implementation manner of the foregoing intrusion detection intelligent device for multiple types of data, further, the multiple types of input and output interfaces further include: a display port;
and the display port is used for accessing the liquid crystal display.
In this embodiment, as shown in fig. 2, the input/output interface of the intrusion detection intelligent device includes: encryption and decryption card interface, internet access, RS232 serial interface, USB interface, CAN interface, AD interface and digital IO interface, as shown in figure 6, intrusion detection smart machine CAN pass through input/output interface inserts ten gigabit switch, keyboard, mouse, prevents that hot wall realizes its external interface. Data such as external voltage and the like, signals or digital IO signals sent by industrial CAN equipment are collected and stored in a hard disk embedded in a mainboard module of the intelligent intrusion detection equipment, and data CAN be read and written through upper computer software.
In this embodiment, the multiple types of input/output interfaces may further include: 1 display port, wherein the display port can be used for accessing a liquid crystal display.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: the standby board card is connected with the back plate; wherein,
the spare board card comprises: one or more of RS232 serial interface card, video and audio synthesis card, 1553B bus card, 3U card based on compact PCI bus and 6U card based on compact PCI bus.
In this embodiment, the apparatus further includes: the standby board card is connected with the back plate and is positioned on the front side of the back plate; the spare board card can expand the function of the device according to the actual situation, for example, the spare board card includes: one or more of an RS232 serial interface card, a video and audio synthesis card, a 1553B bus card, a 3U board card based on a compact PCI bus and a 6U board card based on the compact PCI bus are inserted into a standby card slot as shown in FIG. 2, so that the functional performance of the intelligent intrusion detection equipment is further enriched, wherein the 3U board card can be inserted into the 6U board card slot, and the intelligent intrusion detection equipment has strong compatibility; the compact PCI bus abandons the golden finger form of the traditional PCI bus, adopts a stable and reliable pin hole connector form, has high density and high reliability, and simultaneously supports the hot plug function of the board card, thereby realizing the integration of various protocols and multifunctional board cards.
In this embodiment, the back board, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, the rear input/output interface board, and the standby board all use electronic components conforming to the air or military grade, and use structural members conforming to the compact PCI standard and having an elegant appearance, so that the internal board, and chips and components thereon CAN be protected from being damaged by external stress.
While the foregoing is directed to the preferred embodiment of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined in the appended claims.

Claims (10)

1. An intrusion detection smart device for multiple types of data, comprising: the back board, a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module which are connected with the back board; wherein the backplane supports the compact PCI protocol;
the rear input/output interface board is configured to provide multiple types of input/output interfaces, where the multiple types of input/output interfaces include: the system comprises an encryption and decryption card interface, a network interface, an RS232 serial interface, a USB interface, a CAN interface, an AD interface and a digital IO interface, wherein each type of input and output interface is used for acquiring data of a corresponding type in real time;
the CAN & AD card is used for communicating with the CAN interface and the AD interface through the backboard;
the digital IO card is used for communicating with the digital IO interface through the backboard;
the mainboard module is used for carrying out intrusion detection on the acquired data according to a preset intrusion detection rule;
the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on data which is not invaded;
the power module is used for supplying power to the back plate.
2. The intelligent intrusion detection device for multiple types of data according to claim 1, wherein the motherboard module, the CAN & AD card, the digital IO card, the encryption and decryption card, the rear input/output interface board and the power supply module are connected with the backplane by pin-and-socket connectors;
the main board module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power supply module are positioned on the front side of the back board, and the rear input and output interface board is positioned on the rear side of the back board.
3. The intelligent intrusion detection device for multiple types of data according to claim 1, wherein the multiple types of input and output interfaces include: 1-path security card interface, 2-path network interface, 2-path RS232 serial interface, 6-path USB interface, 2-path CAN interface, 10-path AD interface and 24-path digital IO interface.
4. Intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the CAN & AD card comprises: the device comprises a first conversion module and a first interface expansion module;
the first conversion module is used for converting the PCI bus into a local bus, wherein the local bus is connected with the first interface expansion module;
the first interface extension module is used for extending a plurality of paths of CAN signals and a plurality of paths of AD signals, wherein the plurality of paths of CAN signals and the plurality of paths of AD signals are connected to the rear input and output interface board through the backboard, and the rear input and output interface board provides a plurality of paths of CAN interfaces and a plurality of paths of AD interfaces.
5. Intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the digital IO card comprises: the second conversion module and the second interface expansion module;
the second conversion module is configured to convert the PCI bus into a local bus, where the local bus is connected to the second interface expansion module;
the second interface expansion module is configured to expand multiple paths of IO signals, where the multiple paths of IO signals are connected to the rear input/output interface board through the backplane, and the rear input/output interface board provides multiple paths of digital IO interfaces;
each path of digital IO interface in the multiple paths of digital IO interfaces can be independently configured to be an output interface or an input interface.
6. The intelligent intrusion detection device for the multiple types of data according to claim 1 or 3, wherein the device further comprises a first network port expansion module connected with the backboard and a network port transformer connected with the first network port expansion module;
the first network port expansion module and the network port transformer connected with the first network port expansion module are used for expanding a first path of network port;
and the first network port is used for inputting and outputting network data.
7. The intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the device further comprises: the second network port expansion module is connected with the back plate;
the second network port expansion module is used for expanding a second network port;
and the second router port is used for inputting and outputting network data.
8. The intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the device further comprises: an AC filter connected to the back plate;
the alternating current filter is used for filtering 220V alternating current.
9. The intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the multiple types of input and output interfaces further comprise: a display port;
and the display port is used for accessing the liquid crystal display.
10. The intrusion detection smart device for multiple types of data according to claim 1 or 3, wherein the device further comprises: the standby board card is connected with the back plate; wherein,
the spare board card comprises: one or more of RS232 serial interface card, video and audio synthesis card, 1553B bus card, 3U card based on compact PCI bus and 6U card based on compact PCI bus.
CN201710028126.3A 2017-01-13 2017-01-13 A kind of intrusion detection smart machine for multiple types of data Active CN106845219B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710028126.3A CN106845219B (en) 2017-01-13 2017-01-13 A kind of intrusion detection smart machine for multiple types of data

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710028126.3A CN106845219B (en) 2017-01-13 2017-01-13 A kind of intrusion detection smart machine for multiple types of data

Publications (2)

Publication Number Publication Date
CN106845219A true CN106845219A (en) 2017-06-13
CN106845219B CN106845219B (en) 2019-05-10

Family

ID=59124637

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710028126.3A Active CN106845219B (en) 2017-01-13 2017-01-13 A kind of intrusion detection smart machine for multiple types of data

Country Status (1)

Country Link
CN (1) CN106845219B (en)

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107656889A (en) * 2017-08-04 2018-02-02 上海航天电子有限公司 A kind of aerospace electronic product universal detection device
CN108021125A (en) * 2017-12-28 2018-05-11 深圳市永达电子信息股份有限公司 Industrial system signal of communication detecting system
CN108809727A (en) * 2018-06-15 2018-11-13 北京科技大学 A kind of intrusion prevention system of DC motor control system
CN109766301A (en) * 2018-12-25 2019-05-17 北京航天晨信科技有限责任公司 For infusing the bus apparatus of the signal communication of key function
CN113110395A (en) * 2021-04-30 2021-07-13 西安热工研究院有限公司 Multi-bus testing device and method for high-temperature gas cooled reactor control system
CN113204804A (en) * 2021-04-25 2021-08-03 山东英信计算机技术有限公司 Security module, server mainboard and server
CN113242214A (en) * 2021-04-19 2021-08-10 国电南瑞科技股份有限公司 Encryption authentication device, system and method between power secondary equipment board cards
CN113253263A (en) * 2021-06-22 2021-08-13 湖南华诺星空电子技术有限公司 Three-dimensional through-wall radar system
CN113472964A (en) * 2021-06-05 2021-10-01 山东英信计算机技术有限公司 Image processing device and system
CN115847451A (en) * 2022-12-26 2023-03-28 江西洪都航空工业集团有限责任公司 Distributed intelligent robot control system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223320A (en) * 2011-03-31 2011-10-19 华车(北京)交通装备有限公司 CANOPEN-HDLC gateway based on ARM 7
CN103491530A (en) * 2013-09-11 2014-01-01 辽源市信长城信息技术研发有限公司 Intelligent PAD with information safety mechanism
CN204884126U (en) * 2015-07-30 2015-12-16 国家电网公司 Intrusion detection information acquisition communication equipment
CN205283601U (en) * 2016-01-15 2016-06-01 成都智扬易方软件有限公司 Take intrusion detection's network security isolated system

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223320A (en) * 2011-03-31 2011-10-19 华车(北京)交通装备有限公司 CANOPEN-HDLC gateway based on ARM 7
CN103491530A (en) * 2013-09-11 2014-01-01 辽源市信长城信息技术研发有限公司 Intelligent PAD with information safety mechanism
CN204884126U (en) * 2015-07-30 2015-12-16 国家电网公司 Intrusion detection information acquisition communication equipment
CN205283601U (en) * 2016-01-15 2016-06-01 成都智扬易方软件有限公司 Take intrusion detection's network security isolated system

Cited By (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107656889A (en) * 2017-08-04 2018-02-02 上海航天电子有限公司 A kind of aerospace electronic product universal detection device
CN108021125A (en) * 2017-12-28 2018-05-11 深圳市永达电子信息股份有限公司 Industrial system signal of communication detecting system
CN108809727A (en) * 2018-06-15 2018-11-13 北京科技大学 A kind of intrusion prevention system of DC motor control system
CN108809727B (en) * 2018-06-15 2020-08-07 北京科技大学 Intrusion prevention system of direct current motor control system
CN109766301A (en) * 2018-12-25 2019-05-17 北京航天晨信科技有限责任公司 For infusing the bus apparatus of the signal communication of key function
CN113242214A (en) * 2021-04-19 2021-08-10 国电南瑞科技股份有限公司 Encryption authentication device, system and method between power secondary equipment board cards
CN113242214B (en) * 2021-04-19 2022-09-23 国电南瑞科技股份有限公司 Device, system and method for encryption authentication between boards of power secondary equipment
CN113204804A (en) * 2021-04-25 2021-08-03 山东英信计算机技术有限公司 Security module, server mainboard and server
CN113204804B (en) * 2021-04-25 2022-03-22 山东英信计算机技术有限公司 Security module, server mainboard and server
CN113110395A (en) * 2021-04-30 2021-07-13 西安热工研究院有限公司 Multi-bus testing device and method for high-temperature gas cooled reactor control system
CN113472964A (en) * 2021-06-05 2021-10-01 山东英信计算机技术有限公司 Image processing device and system
CN113472964B (en) * 2021-06-05 2024-04-16 山东英信计算机技术有限公司 Image processing device and system
CN113253263A (en) * 2021-06-22 2021-08-13 湖南华诺星空电子技术有限公司 Three-dimensional through-wall radar system
CN113253263B (en) * 2021-06-22 2021-10-15 湖南华诺星空电子技术有限公司 Three-dimensional through-wall radar system
CN115847451A (en) * 2022-12-26 2023-03-28 江西洪都航空工业集团有限责任公司 Distributed intelligent robot control system

Also Published As

Publication number Publication date
CN106845219B (en) 2019-05-10

Similar Documents

Publication Publication Date Title
CN106845219B (en) A kind of intrusion detection smart machine for multiple types of data
CN105119849B (en) A kind of exchange board structure and the data managing method applied to exchange board structure
CN103207852B (en) Multibus embedded processing device
CN207408936U (en) A kind of multiplex roles PCIE device adapter
CN208188815U (en) BMC module system
CN103399830A (en) Equipment and method for reading computer physical memory through PCI Express bus
CN107194257A (en) A kind of trusted system based on domestic TCM chips
CN107645457A (en) A kind of PCIe switch system and method
US6725310B2 (en) Scalable docking architecture to support various bandwidth
CN102880235B (en) Single-board computer based on loongson 2F central processing unit (CPU) as well as reset management and using method of single-board computer
CN105068955A (en) Local bus structure and data interaction method
CN111737178B (en) Method and equipment for obtaining evidence in computer memory and memory evidence analysis system
CN104461796B (en) JTAG debugging modules and adjustment method for embedded 8051CPU
CN216016884U (en) High-speed network isolation card based on FPGA integrated kilomega and tera optical port
CN203386206U (en) Device for reading physical memory of computer through PCI Express interface
CN100511172C (en) Inter-board transparent transmission bus test device and method thereof
CN116340077A (en) Input-output device with debug controller
US8949105B2 (en) Hardware interface board for connecting an emulator to a network
CN210983388U (en) Board card capable of converting one path to multiple paths of PCI-E and PCI bus interfaces
CN210402342U (en) Data encryption and decryption structure based on ZYNQ
CN107770228B (en) 1-Wire communication system and method based on CPCI master control
CN107294607A (en) A kind of USB3.1 Fiber Optic Extension cards based on PCI E
CN208000578U (en) A kind of blade type data processing equipment
Laban et al. Platform for testing and evaluation of PUF and TRNG implementations in FPGAs
CN204143430U (en) Elasticity push-up storage

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20200708

Address after: Room 608, block a, building 1, liantai Times Plaza, 699 Shimao Road, Honggutan New District, Nanchang City, Jiangxi Province

Patentee after: Nanchang Minshun Technology Co., Ltd

Address before: 100083 Haidian District, Xueyuan Road, No. 30,

Patentee before: University OF SCIENCE AND TECHNOLOGY BEIJING

TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20200819

Address after: Room 1411, Juneng building, high tech Industrial Development Zone, Yingtan City, Jiangxi Province

Patentee after: Yingtan Zhihui Internet of things Application Research Institute Co.,Ltd.

Address before: Room 608, block a, building 1, liantai Times Plaza, 699 Shimao Road, Honggutan New District, Nanchang City, Jiangxi Province

Patentee before: Nanchang Minshun Technology Co., Ltd