CN110049111A - A kind of industrial control system teleinstruction control method based on block chain technology - Google Patents

A kind of industrial control system teleinstruction control method based on block chain technology Download PDF

Info

Publication number
CN110049111A
CN110049111A CN201910235702.0A CN201910235702A CN110049111A CN 110049111 A CN110049111 A CN 110049111A CN 201910235702 A CN201910235702 A CN 201910235702A CN 110049111 A CN110049111 A CN 110049111A
Authority
CN
China
Prior art keywords
block chain
control
intelligent contract
teleinstruction
node
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201910235702.0A
Other languages
Chinese (zh)
Inventor
刘利军
余臻
叶韩军
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xiamen University
Shenzhen Research Institute of Xiamen University
Original Assignee
Xiamen University
Shenzhen Research Institute of Xiamen University
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Xiamen University, Shenzhen Research Institute of Xiamen University filed Critical Xiamen University
Priority to CN201910235702.0A priority Critical patent/CN110049111A/en
Publication of CN110049111A publication Critical patent/CN110049111A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/70Software maintenance or management
    • G06F8/71Version control; Configuration management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H04L67/025Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Computer And Data Communications (AREA)

Abstract

A kind of industrial control system teleinstruction control method based on block chain technology, the teleinstruction control being related in industrial control system.OPC environment configurations are carried out in a computer, correlated variables are created in configuration software, and be set as opc server;As relay system and realize that configuration software is communicated with block chain network using Java and Tomcat building Java Web server;Using the public block platform chain of open source, block chain private chain network is built in ether mill in the network where industrial control system;Intelligent contract is write, issue token in intelligent contract and is distributed to the node for the limit that is possessed of control power, and in this, as control authority Rule of judgment;Distributed Application is built using Truffle frame and Vue, program code is write and extracts the teleinstruction that user sends, a transaction is initiated and the control authority judgment method of intelligent contract is called to carry out permission judgement to node account.

Description

A kind of industrial control system teleinstruction control method based on block chain technology
Technical field
The present invention relates to the teleinstruction controls in industrial control system, more particularly, to a kind of based on block chain technology Industrial control system teleinstruction control method.
Background technique
Industrial control system (ICS) covers a plurality of types of control systems, including monitoring system, data collection system, Dcs and programmable logic controller (PLC) etc..Industrial control system is widely used in electric power, water conservancy, petroleum, change The fields such as work, transport and various manufacturing industry.In industrial control system, teleinstruction control is one very basic, simultaneously Vital function again, for example in the drainage system of seabed tunnel, need by remotely sending instruction to drawing water in system It pumps and carries out start-up and shut-down control, if criminal by forging a control node, sends forgery when inappropriate into system Suction pump remote control command is closed, consequence will be hardly imaginable.And traditional solution be usually pass through it is physically-isolated Industrial control system is isolated with outer net and solves the problems, such as this by method.But this measure also brings along a problem, has cut off without outer net Also the connection with internet has been completely cut off while isolation, in nowadays such a Internet era, it is clear that many inconvenience can be brought.
Block chain have the characteristics that decentralization, time series data, collective's maintenance, it is programmable and secure and trusted ([1] Yuan Yong, Wang Feiyue block chain state-of-the-art and prospect [J] automate journal, 2016,42 (4): 481-494).First block chain sheet The database of a decentralization in matter, be by a string using cryptography methods generate data chunk at, each area Between all include a upper block cryptographic Hash, be initially connected to current block from original block, form block chain.Each block Ensure to generate after a upper block sequentially in time, otherwise the cryptographic Hash of previous block is unknown.And intelligence is closed It is approximately a core of block chain technology, they are the computer programs run on block chain database, can work as and meet it It is voluntarily executed when the condition being written in source code.Due to the presence of PoW common recognition algorithm, Sybil attack ([2] Shao can be successfully managed Grotesque peak, gold is clear clear, Zhang Zhao, Qian Weining, Zhou Aoying block chain technology: framework and progress [J] Chinese journal of computers, and 2018,41 (5): 969-988), intelligent contract, which once writes, to be trusted by user, and agreement terms cannot be changed, and contract is can not It changes, therefore is distributed to the node for the limit that is possessed of control power using the intelligent contract publication token in block chain, and the section forged Point is can not actively to obtain the token forever, to not have the permission of control system, this is one and effectively solves Industry Control Node is forged in system to attempt to send the method that malice teleinstruction destroys system.
Summary of the invention
It is an object of the invention to solve the prior art to be easily forged industrial control system on node transmission malice remotely finger The problem of enabling and wrecking provides a kind of industrial control system teleinstruction control method based on block chain technology.
The present invention the following steps are included:
1) OPC environment configurations are carried out in a computer, correlated variables is created in configuration software, and are set as OPC service Device;
It is described to carry out OPC environment configurations in a computer in step 1), correlated variables is created in configuration software, and The specific method for being set as opc server can are as follows:
1.1 installation OPC drivings in a computer first, and to environment configurations needed for computer progress opc server;
1.2 create the variable control of character string type in configuration software, for storing remote control commands, and will Configuration software is set as opc server.
2) as relay system and configuration software and block are realized using Java and Tomcat building Java Web server Chain network communication;
It is described using Java and Tomcat building Java Web server as relay system and realization group in step 2) The specific method that state software is communicated with block chain network can are as follows:
2.1 build Java Web server using Java and Tomcat;
2.2 call Utgard to communicate with opc server (i.e. configuration software) in Java Web;
2.3 define WebSocket server in Java Web, keep it logical with block chain network Distributed Application (DAPP) Letter;
The network port number that 2.4 setting Java Web projects are disposed;
2.5 communicate with Distributed Application (DAPP).
3) using the public block platform chain of open source, block chain is built in ether mill in the network where industrial control system Private chain network;
In step 3), the public block platform chain using open source, ether mill is in the net where industrial control system The specific method that block chain private chain network is built in network can are as follows:
3.1 in a computer install block chain development platform ether mill needed for environment;
3.2 newly-built block chains create generation block;
3.3 starting block chain private chain nodes;
3.4 are carried out step 3.1,3.2 and 3.3 in needing each computer as block chain node, so far complete At building for the local private chain network of block chain.
4) intelligent contract is write, issue token in intelligent contract and is distributed to the node for the limit that is possessed of control power, and with this As control authority Rule of judgment;
It is described to write intelligent contract in step 4), token is issued in intelligent contract and is distributed to the limit that is possessed of control power Node, and can in this, as the specific method of control authority Rule of judgment are as follows:
4.1 write intelligent contract code using Solidity language, issue token tokenA and are distributed to and are possessed of control power The node account of limit, wherein tokenA is the token title of creation;
4.2 defined in intelligent contract token transfer accounts with control authority judgement the methods of;
The intelligent contract write in 4.3 compilation steps 4.1 is simultaneously deployed in the block chain private chain network built in step 3) On.
5) Distributed Application (DAPP) is built using Truffle frame and Vue, writes program code and extracts what user sent Teleinstruction initiates a transaction and the control authority judgment method of intelligent contract is called to carry out permission judgement to node account.
It is described to build Distributed Application (DAPP) using Truffle frame and Vue in step 5), write program code Extract the teleinstruction that user sends, initiate a transaction call the control authority judgment method of intelligent contract to node account into The specific method of row permission judgement can are as follows:
5.1, which write code using Truffle frame and Vue, realizes Distributed Application (DAPP), and to user on the page Corresponding remote control commands are inputted to extract;
5.2 initiate a transaction, which is that the node account is a certain number of to the intelligent contract transmission in step 4) Token TokenA;
Control authority judgment method defined in intelligent contract is called in 5.3 trade fair in step 5.2, is judged to send and is somebody's turn to do Whether the node account of instruction has the control authority to industrial control system;
It, will the middle long-range control extracted of step 1) by Websocket interface if the 5.4 node accounts have control authority Instruct the relay system that is sent in step 2), relay system recycle step 2) in Utgard remote control commands are sent To opc server (i.e. configuration software), safe long-range control is realized;If sending failure without control authority;
If 5.5 find that the token quantity in the node account that some has permission is lower than certain amount and (is such as lower than when not being 0 When 2 token tokenA), then the automatic token transfer account method called in intelligent contract is provided a certain number of to the node account Token.
The present invention builds block chain private chain network using ether mill platform in a network, and writes intelligent contract code, Token is issued in intelligent contract, and the token is distributed to the node for the limit that is possessed of control power, while control is defined in intelligent contract The intelligence contract is deployed in block chain private chain network by the judgment method of permission processed, load.User is using Truffle and Vue It is operated in the Distributed Application (DAPP) built, input the remote control commands to industrial control system and attempts to be sent out It send to industrial control system (configuration software), a transaction will be initiated at this time, send one from the node account to intelligent contract The token tokenA of fixed number amount, the trade fair call the control method of the control authority of intelligent contract to weigh the node account Limit judgement can not get token tokenA due to forging node, and control authority can not be possessed forever by forging node.And it gathers around There is the node account of control authority by building Java Web server using Java programming language and Tomcat, respectively Remote control command is sent to opc server (i.e. configuration software) by Websocket and Jopc interface, is realized to Industry Control system The safety long-distance of system instructs control.
The Java Web server that the present invention is built using Java is as the configuration software and block in industrial control system The relay system that Distributed Application (DAPP) communicates in chain realizes industrial control system medium-long range director data to block chain network Data interaction.Token is issued using intelligent contract, and token is distributed to the node account for the limit that is possessed of control power, while in intelligence The method judged control authority can be defined on contract, permanently execute, crack since the intelligent contract in block chain has The features such as cost is very big, the node account of forgery are can not actively to obtain the token forever, therefore also just can not be to Industry Control System carries out malice control, ensures that the safety to industrial control system in this way.
Compared with prior art, the invention has the benefit that
Traditional industrial control system is that the network of industrial control system is isolated with outer net using physical isolation mostly, is deposited Reducing internuncial problem with internet, cause may to lose after many functions, such as physical isolation can not strange land it is remote Journey remote control etc..And the token that the present invention is issued using contract intelligent in block chain technology is as the judgment basis of control authority, by In the characteristic of intelligent contract, the node account of forgery is can not to obtain token forever, therefore also can not just possess control authority, from And it solves the problems, such as easily to be forged node transmission forgery instruction malice control after traditional industry control system is networked.
Detailed description of the invention
Fig. 1 is the industrial control system medium-long range command control system block diagram based on block chain technology.
Fig. 2 is the flow chart of the embodiment of the present invention.
Fig. 3 is the relay system program execution flow figure built in step 2.
Fig. 4 is the Distributed Application DAPP program execution flow figure built in step 4.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Whole description.
Referring to Fig. 1 and 2, the present invention is for the teleinstruction control method in the industrial control system based on block chain technology It is specifically implemented according to the following steps:
Step 1: carrying out OPC environment configurations in a computer, correlated variables is created in configuration software, and be set as OPC Server.
1) installation OPC driving in a computer first, and to environment configurations needed for computer progress opc server.
Installation OPC drives OPC Core Components Redistributable in a computer.DCOM is carried out such as Lower configuration:
A) configuration allows configuration software access authority and open OPC to communicate 135 on Windows firewall management interface Port;
B) dcomcnfg server is run, into " my computer " attribute configuration, into the default property page, choose " Distributed COM is enabled on this computer ", default identity rank is changed to "None", into the default security mechanism page, confirmation is visited Ask the default value in permission and default starting permission without EveryOne;
C) attribute configuration for entering corresponding OPC software in DCOM configuration, the authentication rank in General Page is changed For "None", chooses " running application program on this computer ", chooses " running application program on this computer ", identity In identified page, select " oolhiu interactive user ".
2) the variable control that character string type is created in configuration software, for storing remote control commands, and by group State software is set as opc server.
A) variable of character string type, the entitled control of variable, when the value of control occurs are created in configuration software When variation, configuration software can extract the information of the value, issue control instruction to the equipment controlled.
B) set opc server for itself in configuration software, be arranged its read-write mode be " asynchronous reading " and " asynchronous write ", Recovery policy etc. when communication failure is set, communicates the control data in a) by OPC and is read in real time by applications It writes.
Step 2: using Java and Tomcat building Java Web server as relay system and realize configuration software and The communication of block chain network.
1) Java Web server is built using Java and Tomcat.
Under Eclipse programmed environment, Java Web project is created using Java programming language, and the project is deployed in In Tomcat service, using the server as the relay system of configuration software and block chain network, the work of data interaction is completed With.
2) Utgard is called to communicate with opc server (i.e. configuration software) in Java Web.
A) configuration file of opc server is created in project, this document includes the IP of host where the opc server Location, user name, password and opc server (i.e. configuration software) clsId, which is that windows system answers difference The ID code for uniquely indicating him is distributed with program, is distinguished for the mark to its identity and with other objects.
B) configuration file created in load a) obtains the connection letter on the basis such as host ip, user name, password and clsId Breath, then connects corresponding opc server (i.e. configuration software);
C) it creates OPC and is grouped group, the teleinstruction variable control in configuration software is added to grouping group In;
Whether d) judgement is connect with opc server succeeds, if being not connected with successfully, it tries be again coupled to.
3) WebSocket server is defined in Java Web, keeps it logical with block chain network Distributed Application (DAPP) Letter.
A) a WebSocket server, the value conduct of note are defined using note@ServerEndPoint in the project The address URL of terminal (present invention, that is, block chain Distributed Application DAPP) access of monitoring users connection;
B) successful connection calling is defined respectively using note@OnOpen ,@OnClose and@OnMessage in the project The method and receive the method called after the message that client (DAPP) is sent that method, connection closed call.
4) network port number that setting Java Web project is disposed.
To being configured after the network port of this Web project in Eclipse translation and compiling environment, it is arranged in the present embodiment It is 11111.
The relay system program execution flow figure built in step 2 is referring to Fig. 3.
Step 3: the public block platform chain of open source is utilized --- it is taken in the network where industrial control system in ether mill Build block chain private chain network:
1) environment needed for installing block chain development platform ether mill in a computer.
The computer in need for being connected into block chain network be known as the node of block chain, pacify in the computer of each node Fill block chain Open Source Platform ether mill and intelligent contract develop needed for environment, have git, go, ethereum, nodejs, npm, Geth, truffle and rpc etc.;
2) it creates block chain and creates generation block.
A) a genesis.json file is created in a computer, and as wound generation block, it is the starting point of block chain, should The attribute of this block chain network is defined in file, this document includes following information:
1. Mixhash, Nonce: cooperation is to prove to have done enough calculation amounts on block chain;
2. Difficulty: mine disaster degree is dug in definition;
3. Alloc: inserting some remaining sums in advance;
4. Coinbase: wallet address;
5. Timestamp: timestamp;
6. ParentHash: hash value (the wound not upper block of generation block, so being generally set to of a upper block 0);
7. ExtraData: some additional informations can be stored for private chain;
8. GasLimit: the consumable gas upper limit of a block.
B) it is initialized in console console using sentence " geth--datadir "/" init genesis.json " Original block, it will increase two files geth and keystore newly under current directory.
3) start block chain private chain node.
Starting geth can start the block chain private chain in ether mill, but need to be added in start command in starting Parameter guarantees that block chain operates normally.Parameter includes as follows:
1. datadir: current block chain network file stores path;
2. identity: the mark of block chain is at will filled in, for indicating the name of current network;
3. rpc: starting rpc communication can carry out the deployment and debugging of intelligent contract;
4. rpcapi: the client for the rpc that setting allows to connect, generally db, eth, net, web3;
5. networkid: the network ID of current block chain, the ID number of all nodes must be identical in the same block chain;
6. console: start command row mode can execute order in Geth;
7. rpccorsdomain: specifying the address domain of accessible APi, being set as " * ", then any address is ok Access.
Therefore, in console console using sentence " geth--datadir "/"-identity " mydev " -- rpc--rpcapi"db,eth,net,web3,admin,miner,personal,rpc"--rpccorsdomain"*"-- Networkid100console " starts the block chain of this node.
And 3) it is carried out step 1), 2) in needing each computer as block chain node, so far completes block The local private chain network of chain is built.
Step 4: writing intelligent contract, issues token in intelligent contract and is distributed to the node for the limit that is possessed of control power, and In this, as control authority Rule of judgment.
1) intelligent contract code is write using Solidity language, issue token tokenA and is distributed to the limit that is possessed of control power Node account:
Token tokenA is issued in intelligent contract, and sends a certain number of generations to the node account for the limit that is possessed of control power Transaction coin when coin is as subsequent transmission control instruction;
2) defined in intelligent contract token transfer accounts with control authority judgement the methods of:
A) judgment method of control authority is defined in intelligent contract, the input parameter of this method is the ground of node account Location, principle are by judging whether the node possesses control according to whether the node account possesses the token tokenA issued in a) Permission processed (token can not actively be got forever by forging node);
B) method that token is transferred accounts is defined in intelligent contract, function is when the node account token for possessing control authority When the lazy weight of tokenA, party's normal direction node account can be called to provide the token of specified quantity to guarantee next secondary control The correct execution of instruction.
3) it compiles the intelligent contract write in 1) and is deployed in the block chain private chain network built in step 3:
A) file of project, uses order " truffle where entering intelligent contract in console console Complie " is compiled intelligent contract code, such as compiles successfully, and console prints " writing artifact to. build\contracts";
B) use order " truffle migrate--reset-all " by compiled intelligence in console console Contract is deployed in the block chain private chain network put up.
The Distributed Application DAPP program execution flow figure built in step 4 is referring to fig. 4.
Step 5: building Distributed Application (DAPP) using Truffle frame and Vue, writes program code and extracts user The teleinstruction of transmission initiates a transaction and the control authority judgment method of intelligent contract is called to sentence node account progress permission It is disconnected.
1) code is write using Truffle frame and Vue and realize Distributed Application (DAPP), and defeated on the page to user Enter corresponding remote control commands to extract:
A) instance objects are created using WebSocket, parameter is the Distributed Application WebSocket to be accessed service Device, the relay system as built in step 2 in this example, so the form of parameter are as follows: ws: // host ip: port numbers/ Entry name/note parameter.Wherein the IP address of the computer of the Java Web deployment in the entitled step 2 of host, port numbers are step Rapid 2 4) in be arranged port numbers: 11111, the entitled Java Web project name of project, notes parameter be step 2 3) in note The value of solution;The process for creating the object is to connect WebSocket server;
B) monitor of WebSocket is defined in the project, is attempted defined in the relay system in Connection Step two WebSocket server;
C) teleinstruction that user inputs at the Distributed Application interface (DAPP) is extracted.
2) transaction is initiated, which is that intelligent contract of the node account into step 4 sends a certain number of generations Coin TokenA.
3) control authority judgment method defined in intelligent contract is called in the trade fair in step 2), judges that sending this refers to Whether the node account of order has the control authority to industrial control system:
A) judgment method of control authority defined in intelligent contract is called in the trade fair, and it is to send that this method, which inputs parameter, The node account address of control instruction;
B) this method is by judging whether user's token tokenA judges whether the node possesses control for the node account Permission is that can not actively obtain token tokenA forever due to forging node account, and this method can effectively judge whether to gather around There is control authority;
If c) possessing control authority, this method returns to a true;Otherwise, false is protected.
If 4) the node account has control authority, pass through the long-range control that Websocket interface will extract in step 4 The relay system being sent in step 2 is instructed, the Utgard in relay system recycle step two sends remote control commands To opc server (i.e. configuration software), safe long-range control is realized;If sending failure without control authority.
If 5) find the token quantity in node account that some has permission when lower than certain amount and being 0 (as lower than 2 When a token tokenA), then the automatic token transfer account method called in intelligent contract is provided a certain number of to the node account Token.
The features such as present invention is executed automatically using the middle intelligent contract of block chain and cost under fire is very big, for work The instruction control of industry control system medium-long range is easily forged the safety problem that node sends malice control instruction, constructs based on block Teleinstruction control system in the industrial control system of chain technology.Distributed Application has been built using Truffle and Vue (DAPP), user is inputted in this application to after the remote control commands of industrial control system and transmission, and system will initiate one The address of transaction, Xiang Zhineng contract sends a token, which, which is issued and be distributed to by intelligent contract, possesses control authority Node account.The judgment method that control authority is carried out to the node account for initiating transaction is defined in intelligent contract, according to section Whether point account possesses token to judge whether the node possesses control authority, and the generation can not actively be obtained forever by forging node Coin.And traditional method is usually to be physically isolated, and industrial control system network and outer net are completely cut off, and can prevent to forge node Intrusion, but due to reducing the connectivity with internet, cannot achieve but also such as place remote monitors such function. In comparison, method of the invention utilizes puppet on the basis of keeping industrial control system and internet to have adequately internuncial The characteristic for the token issued in intelligent contract can not actively be obtained by making node forever, ensure that the safety of teleinstruction control.

Claims (7)

1. a kind of industrial control system teleinstruction control method based on block chain technology, it is characterised in that including following step It is rapid:
1) OPC environment configurations are carried out in a computer, correlated variables are created in configuration software, and be set as opc server;
2) as relay system and configuration software and block link network are realized using Java and Tomcat building Java Web server Network communication;
3) using the public block platform chain of open source, block chain private chain is built in ether mill in the network where industrial control system Network;
4) intelligent contract is write, issue token in intelligent contract and is distributed to the node for the limit that is possessed of control power, and in this, as Control authority Rule of judgment;
5) Distributed Application is built using Truffle frame and Vue, writes program code and extracts the teleinstruction that user sends, Initiating a transaction calls the control authority judgment method of intelligent contract to carry out permission judgement to node account.
2. a kind of industrial control system teleinstruction control method based on block chain technology as described in claim 1, feature It is in step 1), it is described to carry out OPC environment configurations in a computer, correlated variables is created in configuration software, and be arranged For opc server method particularly includes:
1.1 installation OPC drivings in a computer first, and to environment configurations needed for computer progress opc server;
1.2 create the variable control of character string type in configuration software, for storing remote control commands, and by configuration Software is set as opc server.
3. a kind of industrial control system teleinstruction control method based on block chain technology as described in claim 1, feature It is in step 2), it is described as relay system and to realize that configuration is soft using Java and Tomcat building Java Web server Part is communicated with block chain network method particularly includes:
2.1 build Java Web server using Java and Tomcat;
2.2 call Utgard to communicate with opc server in Java Web;
2.3 define WebSocket server in Java Web, communicate it with block chain network Distributed Application;
The network port number that 2.4 setting Java Web projects are disposed;
2.5 communicate with Distributed Application.
4. a kind of industrial control system teleinstruction control method based on block chain technology as described in claim 1, feature It is in step 3), the public block platform chain using open source, ether mill is in the network where industrial control system Build block chain private chain network method particularly includes:
3.1 in a computer install block chain development platform ether mill needed for environment;
3.2 newly-built block chains create generation block;
3.3 starting block chain private chain nodes;
3.4 are carried out step 3.1,3.2 and 3.3 in needing each computer as block chain node, so far complete area The local private chain network of block chain is built.
5. a kind of industrial control system teleinstruction control method based on block chain technology as described in claim 1, feature It is in step 4), it is described to write intelligent contract, token is issued in intelligent contract and is distributed to the section for the limit that is possessed of control power Point, and in this, as control authority Rule of judgment method particularly includes:
4.1 write intelligent contract code using Solidity language, issue token tokenA and are distributed to the limit that is possessed of control power Node account;
4.2 defined in intelligent contract token transfer accounts with control authority judgement the methods of;
The intelligent contract write in 4.3 compilation steps 5.1 is simultaneously deployed in the block chain private chain network built in step 3).
6. a kind of industrial control system teleinstruction control method based on block chain technology as described in claim 1, feature It is in step 5), it is described to build Distributed Application using Truffle frame and Vue, it writes program code and extracts user's hair The teleinstruction sent initiates a transaction and the control authority judgment method of intelligent contract is called to carry out permission judgement to node account Method particularly includes:
5.1, which write code using Truffle frame and Vue, realizes Distributed Application, and inputs on the page to user corresponding Remote control commands extract;
5.2 initiate a transaction, which sends a certain number of tokens to the intelligent contract in step 4) for the node account TokenA;
Control authority judgment method defined in intelligent contract is called in 5.3 trade fair in step 5.2, judges to send the instruction Node account whether there is the control authority to industrial control system;
It, will the middle remote control commands extracted of step 1) by Websocket interface if the 5.4 node accounts have control authority The relay system being sent in step 2), relay system recycle step 2) in Utgard remote control commands are sent to Opc server realizes safe long-range control;If sending failure without control authority;
If 5.5 when finding that token quantity in the node account that some has permission lower than certain amount and is 0, automatic to call Token transfer account method in intelligent contract provides a certain number of tokens to the node account.
7. a kind of industrial control system teleinstruction control method based on block chain technology as claimed in claim 6, feature If be to find the token quantity in node account that some has permission lower than 2 token tokenA, it is automatic that intelligence is called to close Token transfer account method in about is lower than 2 tokens to the node account granting.
CN201910235702.0A 2019-03-27 2019-03-27 A kind of industrial control system teleinstruction control method based on block chain technology Pending CN110049111A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910235702.0A CN110049111A (en) 2019-03-27 2019-03-27 A kind of industrial control system teleinstruction control method based on block chain technology

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910235702.0A CN110049111A (en) 2019-03-27 2019-03-27 A kind of industrial control system teleinstruction control method based on block chain technology

Publications (1)

Publication Number Publication Date
CN110049111A true CN110049111A (en) 2019-07-23

Family

ID=67275215

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910235702.0A Pending CN110049111A (en) 2019-03-27 2019-03-27 A kind of industrial control system teleinstruction control method based on block chain technology

Country Status (1)

Country Link
CN (1) CN110049111A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110688170A (en) * 2019-09-25 2020-01-14 浙江中控技术股份有限公司 Operation station operation optimization device and method
CN111131229A (en) * 2019-12-26 2020-05-08 湖南天河国云科技有限公司 Block chain-based industrial internet trusted control method, device and system
CN111523110A (en) * 2019-11-08 2020-08-11 支付宝(杭州)信息技术有限公司 Permission query configuration method and device based on chain codes

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107911373A (en) * 2017-11-24 2018-04-13 中钞信用卡产业发展有限公司杭州区块链技术研究院 A kind of block chain right management method and system
CN108537549A (en) * 2018-04-18 2018-09-14 四川众之金科技有限公司 A kind of purview certification method and device
CN108737348A (en) * 2017-04-21 2018-11-02 中国科学院信息工程研究所 A kind of internet of things equipment access control method of the intelligent contract based on block chain
CN108989357A (en) * 2018-09-12 2018-12-11 中国人民解放军国防科技大学 User authorization and data sharing access control method based on block chain
CN109040235A (en) * 2018-08-01 2018-12-18 厦门大学 A kind of storage method of the industrial control system operation note based on block chain technology
US20190081794A1 (en) * 2017-09-14 2019-03-14 Blockpass IDN Limited Systems and methods for user identity

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108737348A (en) * 2017-04-21 2018-11-02 中国科学院信息工程研究所 A kind of internet of things equipment access control method of the intelligent contract based on block chain
US20190081794A1 (en) * 2017-09-14 2019-03-14 Blockpass IDN Limited Systems and methods for user identity
CN107911373A (en) * 2017-11-24 2018-04-13 中钞信用卡产业发展有限公司杭州区块链技术研究院 A kind of block chain right management method and system
CN108537549A (en) * 2018-04-18 2018-09-14 四川众之金科技有限公司 A kind of purview certification method and device
CN109040235A (en) * 2018-08-01 2018-12-18 厦门大学 A kind of storage method of the industrial control system operation note based on block chain technology
CN108989357A (en) * 2018-09-12 2018-12-11 中国人民解放军国防科技大学 User authorization and data sharing access control method based on block chain

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
赵晓峰: "基于OPC技术的Web工控系统的研究与实现", 《自动化与仪表》 *

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110688170A (en) * 2019-09-25 2020-01-14 浙江中控技术股份有限公司 Operation station operation optimization device and method
CN110688170B (en) * 2019-09-25 2022-04-22 浙江中控技术股份有限公司 Operation station operation optimization device and method
CN111523110A (en) * 2019-11-08 2020-08-11 支付宝(杭州)信息技术有限公司 Permission query configuration method and device based on chain codes
CN111523110B (en) * 2019-11-08 2023-05-02 支付宝(杭州)信息技术有限公司 Authority query configuration method and device based on chain codes
CN111131229A (en) * 2019-12-26 2020-05-08 湖南天河国云科技有限公司 Block chain-based industrial internet trusted control method, device and system
CN111131229B (en) * 2019-12-26 2022-03-01 湖南天河国云科技有限公司 Block chain-based industrial internet trusted control method, device and system
CN114268645A (en) * 2019-12-26 2022-04-01 湖南天河国云科技有限公司 Block chain-based industrial internet trusted control method, device and system

Similar Documents

Publication Publication Date Title
CN101788982B (en) Method of cross-domain interaction and for protecting Web application in unmodified browser and system thereof
CN109040235A (en) A kind of storage method of the industrial control system operation note based on block chain technology
CN110049111A (en) A kind of industrial control system teleinstruction control method based on block chain technology
JP2023100981A (en) Control flow in block chain script
CN103065088B (en) Based on the system and method for the ruling detection computations machine security threat of computer user
CN106647560A (en) Mobile application unified management method
Lemaire et al. A SysML extension for security analysis of industrial control systems
CN106462699A (en) Software protection
CN111209558A (en) Internet of things equipment identity authentication method and system based on block chain
CN103780614A (en) Method for SQL injection vulnerability discovery based on simulated attack extension
CN104881606A (en) Formalized modeling based software security requirement acquisition method
CN107276986B (en) Method, device and system for protecting website through machine learning
CN105391724A (en) Authorization management method and authorization management device used for information system
Khaled et al. Assessing the severity of smart attacks in industrial cyber-physical systems
Durante et al. CVS: A compiler for the analysis of cryptographic protocols
CN107566430A (en) A kind of electric power mobile terminal compliance inspection and policy controlling system
CN107644165A (en) Security protection platform and safety protecting method and device
Akbarzadeh et al. Dependency-based security risk assessment for cyber-physical systems
Ablahd Using python to detect web application vulnerability
Kulik et al. Compliance verification of a cyber security standard for Cloud-connected SCADA
CN117034263A (en) Application method of intelligent contract in unmanned aerial vehicle cluster
CN111090802A (en) Malicious web crawler monitoring and processing method and system based on machine learning
Xu et al. A minimum defense cost calculation method for attack defense trees
CN115774872A (en) Platform region fusion type terminal software safety detection method based on sandbox
CN113542204B (en) Protection rule generation method and device and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20190723