CN110187661A - Serial data isolation protecting device is used safely in a kind of industry control - Google Patents

Abstract

A serial port data isolation protection device for industrial control security, including a main control chip, a power isolation module and a communication isolation module are connected to the main control chip, and the power isolation module is used for electrical power supply and signal transmission of the main control chip. Isolation, the communication isolation module is used to isolate the transmission data from the internal and external network of the transmission data; the parameter configuration module and the data output module are connected on the main control chip, and the parameter configuration module is used to combine the upper computer and the serial port to configure the license agreement , the data output module is used to output irrelevant or erroneous data according to the protocol completed by configuration; a communication processing module is also provided on the main control chip, and the communication processing module is used to establish a data transparent transmission channel; through data output The module screens and transmits unnecessary data according to the license agreement; establishes a data transparent transmission channel through the communication processing module, and transmits the data, which has the advantages of safe, true and effective data transmission.

Description

A serial port data isolation protection device for industrial control security

Technical field:

The invention relates to a serial port data isolation protection device for industrial control safety.

Background technique:

A power plant, also known as a power station, is a factory that converts various primary energy stored in nature into electrical energy. At the end of the 19th century, as the demand for electricity increased, people began to propose the idea of establishing an electricity production center. With the development of motor manufacturing technology, the expansion of the application range of electric energy, and the rapid growth of the demand for electricity in production, power plants have emerged as the times require.

Existing power plants generate electricity in a variety of ways: those that rely on thermal power are called thermal power plants, those that rely on hydroelectric power are called hydropower plants, and there are also new power plants that rely on solar, wind, tidal and nuclear fuels to generate electricity.

Since the power plant is the power center of the city, the amount of data exchanged in the power plant is huge, which leads to the inevitable generation and transmission of some irrelevant data or wrong data in the process of data transparent transmission; the existing data The transparent transmission isolation device often only uses a special transmission channel for data interaction, which is a physical isolation method, and the isolation effect is poor, and it cannot fundamentally isolate unnecessary data.

Invention content:

The embodiment of the present invention provides a serial port data isolation and protection device for industrial control security, which has a reasonable structural design and adopts two isolation methods: photoelectric isolation and physical isolation, and can freely set data configuration rules and filter out data according to user needs. The transparent transmission of data is fundamentally realized, the degree of freedom of operation is high, and the practicability is strong, which solves the problems existing in the prior art.

The technical scheme that the present invention adopts for solving the problems of the technologies described above is:

A serial port data isolation protection device for industrial control security, including a main control chip, a power isolation module and a communication isolation module are connected to the main control chip, and the power isolation module is used for electrical power supply and signal transmission of the main control chip. Isolation, the communication isolation module is used to isolate the transmission data from the internal and external network of the transmission data; the parameter configuration module and the data output module are connected on the main control chip, and the parameter configuration module is used to combine the upper computer and the serial port to configure the license agreement , the data output module is used to output irrelevant or wrong data according to the configured protocol; a communication processing module is also provided on the main control chip, and the communication processing module is used to establish a data transparent transmission channel.

The main control chip is connected with a voltage stabilizing module and a status indicating module through wires, the voltage stabilizing module is used to provide a stable power supply for the main controlling chip, and the status indicating module is used to display the real-time status of equipment operation and data transmission .

The power isolation module is an isolated DC/DC power supply or a magnetic isolation ADUM1201 of ADI Company.

The communication isolation module includes an optical fiber transmission module or an electrical signal transmission module.

The optical fiber transmission module is a single-mode optical fiber, and the electrical signal transmission module adopts TTL level or RS232 level.

The parameter configuration module is DATA-8203, and the parameter configuration module includes an electrically connected preset module and an execution module, the preset module is used to set the data licensing agreement, and the execution module is used to set the corresponding parameter.

The data output module is MO73S, and the data output module includes an electrically connected screening module and a transmission module, the screening module is used to select irrelevant data according to the license agreement, and the transmission module is used to select irrelevant data The data is transmitted through the serial port.

The communication processing module is an RS232 communication processing module or an RS485 communication processing module.

The voltage stabilizing module is LM7312, and the status indicating module is an LED indicator light.

The model of the main control chip is STM32F103.

The present invention adopts the above-mentioned structure, realizes power isolation and data isolation through the power isolation module and the communication isolation module, cuts off the data series connection and electrical connection of the internal and external networks, and ensures the safety of data transmission; cooperates with the upper computer and the serial port through the parameter configuration module, and sets strict Fixed communication format or exclusive rules or other rule formats; filter and transmit unnecessary data through the data output module according to the license agreement; establish a data transparent transmission channel through the communication processing module, and transmit the data, with data transmission security and authenticity Effective advantages.

Description of drawings:

Fig. 1 is a structural schematic diagram of the present invention.

FIG. 2 is a schematic structural diagram of the parameter configuration module of the present invention.

Fig. 3 is a schematic structural diagram of the data output module of the present invention.

Detailed ways:

In order to clearly illustrate the technical features of this solution, the present invention will be described in detail below through specific implementation modes and in conjunction with the accompanying drawings.

As shown in Figure 1-3, a serial port data isolation and protection device for industrial control security includes a main control chip, and a power isolation module and a communication isolation module are connected to the main control chip. The power supply and signal transmission of the chip are electrically isolated, and the communication isolation module is used to isolate the transmission data from the internal and external networks of the transmission data; the parameter configuration module and the data output module are connected on the main control chip, and the parameter configuration module is used for In combination with the upper computer and the serial port configuration license agreement, the data output module is used to output irrelevant or wrong data according to the completed protocol of the configuration; a communication processing module is also provided on the main control chip, and the communication processing module is used to establish Data transparent transmission channel.

The main control chip is connected with a voltage stabilizing module and a status indicating module through wires, the voltage stabilizing module is used to provide a stable power supply for the main controlling chip, and the status indicating module is used to display the real-time status of equipment operation and data transmission .

The power isolation module is an isolated DC/DC power supply or a magnetic isolation ADUM1201 of ADI Company.

The communication isolation module includes an optical fiber transmission module or an electrical signal transmission module.

The optical fiber transmission module is a single-mode optical fiber, and the electrical signal transmission module adopts TTL level or RS232 level.

The parameter configuration module is DATA-8203, and the parameter configuration module includes an electrically connected preset module and an execution module, the preset module is used to set the data licensing agreement, and the execution module is used to set the corresponding parameter.

The data output module is MO73S, and the data output module includes an electrically connected screening module and a transmission module, the screening module is used to select irrelevant data according to the license agreement, and the transmission module is used to select irrelevant data The data is transmitted through the serial port.

The communication processing module is an RS232 communication processing module or an RS485 communication processing module.

The voltage stabilizing module is LM7312, and the status indicating module is an LED indicator light.

The model of the main control chip is STM32F103.

When in use, the main control chip is powered by the voltage stabilization module, and the data transparent transmission isolation device enters the working state; firstly, through the parameter configuration module combined with the upper computer and the interface, the license agreement for data transparent transmission or strict fixed communication format or exclusive rules or other The rule format enables irrelevant data or wrong data to be screened out. The preset module on the parameter configuration module sets the data license agreement, and the execution module sets the corresponding parameters according to the set data license agreement. After the data license agreement is set, the data The output module enters the working state, the screening module selects irrelevant data based on the data license agreement and summarizes and organizes all the selected data, and the transmission module transmits the selected data, which is convenient for users to analyze according to the data; the parameter configuration module The main control chip and the data output module are electrically connected to the main control chip, which is uniformly controlled by the main control chip, which is easy to operate and has high precision; the main control chip is also connected with a power isolation module and a communication isolation module, which adopts a combination of photoelectric isolation and physical isolation The method isolates the data series connection and electrical connection of the internal and external network, realizes the safe isolation and transmission of serial port data, and ensures the safety of data transmission; the communication processing module connected to the main control chip is RS-232 communication processing module or RS-485 communication processing module, A stable and fast data transparent transmission channel can be established to ensure normal data transmission; the status indication module can display the working status of the transparent transmission device in real time, and obtain the working status of the transparent transmission device through the change of the LED indicator light, which is safe and practical; In the process of transmission, the transmission method of one-way communication is adopted to avoid reverse data write-back and ensure data security.

The above specific implementation manners cannot be regarded as limiting the protection scope of the present invention. For those skilled in the art, any substitution, improvement or transformation made to the implementation manners of the present invention shall fall within the protection scope of the present invention.

The parts of the present invention that are not described in detail are known technologies of those skilled in the art.

Claims (10)

1. A serial port data isolation protection device for industrial control security, characterized in that: it comprises a main control chip, on which a power supply isolation module and a communication isolation module are connected, and the power supply isolation module is used to supply power to the main control chip The power supply and signal transmission are electrically isolated, and the communication isolation module is used to isolate the transmission data from the internal and external networks of the transmission data; the parameter configuration module and the data output module are connected to the main control chip, and the parameter configuration module is used to combine the upper Computer and serial port configuration license agreement, the data output module is used to output irrelevant or wrong data according to the configured protocol; a communication processing module is also provided on the main control chip, and the communication processing module is used to establish data transparent transmission channel. 2. The device according to claim 1, characterized in that: the main control chip is connected with a voltage stabilizing module and a status indicating module through wires, and the voltage stabilizing module is used to provide a stable power supply for the main control chip, so The above status indication module is used to display the real-time status of equipment operation and data transmission. 3. The device according to claim 1, wherein the power isolation module is an isolated DC/DC power supply or a magnetic isolation ADUM1201 of ADI Company. 4. The device according to claim 1, wherein the communication isolation module comprises an optical fiber transmission module or an electrical signal transmission module. 5. The device according to claim 4, wherein the optical fiber transmission module is a single-mode optical fiber, and the electrical signal transmission module adopts TTL level or RS232 level. 6. The device according to claim 1, characterized in that: the parameter configuration module is DATA-8203, the parameter configuration module includes an electrically connected preset module and an execution module, and the preset module is used to set data A license agreement, the execution module is used to set corresponding parameters according to the license agreement. 7. The device according to claim 1, characterized in that: the data output module is MO73S, the data output module includes an electrically connected screening module and a transmission module, and the screening module is used to select different For relevant data, the transmission module is used to transmit the selected irrelevant data through the serial port. 8. The device according to claim 1, wherein the communication processing module is an RS232 communication processing module or an RS485 communication processing module. 9. The device according to claim 2, wherein the voltage stabilizing module is LM7312, and the status indicating module is an LED indicator. 10. The device according to claim 1, wherein the model of the main control chip is STM32F103.