CN114647233A - PLC operation configuration monitoring method and device, storage medium and electronic equipment - Google Patents

PLC operation configuration monitoring method and device, storage medium and electronic equipment Download PDF

Info

Publication number
CN114647233A
CN114647233A CN202210539281.2A CN202210539281A CN114647233A CN 114647233 A CN114647233 A CN 114647233A CN 202210539281 A CN202210539281 A CN 202210539281A CN 114647233 A CN114647233 A CN 114647233A
Authority
CN
China
Prior art keywords
plc
data
configuration unit
configuration
verification
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202210539281.2A
Other languages
Chinese (zh)
Other versions
CN114647233B (en
Inventor
张志群
褚健
张江顺
陈超
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhejiang Guoli Network Security Technology Co ltd
Original Assignee
Zhejiang Guoli Network Security Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhejiang Guoli Network Security Technology Co ltd filed Critical Zhejiang Guoli Network Security Technology Co ltd
Priority to CN202210539281.2A priority Critical patent/CN114647233B/en
Publication of CN114647233A publication Critical patent/CN114647233A/en
Application granted granted Critical
Publication of CN114647233B publication Critical patent/CN114647233B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00Testing or monitoring of control systems or parts thereof
    • G05B23/02Electric testing or monitoring
    • G05B23/0205Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0208Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
    • G05B23/0213Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/24Pc safety
    • G05B2219/24065Real time diagnostics

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Programmable Controllers (AREA)

Abstract

The specification discloses a PLC operation configuration monitoring method, a PLC operation configuration monitoring device, a PLC operation configuration monitoring storage medium and electronic equipment. And when the PLC operates, sending a verification instruction to the PLC so as to obtain the current data to be verified of the PLC. And monitoring the PLC configuration according to the current data to be verified and the reference verification data of the PLC. The data to be verified of the PLC in the method is obtained based on the function control data of each configuration unit in the current PLC, so that the PLC can be monitored only according to the data to be verified and the reference verification data, and whether the function control data of each configuration unit in the PLC is tampered or not is determined. The method can effectively monitor the operation configuration of the PLC, and also avoids the problems of limiting the programmable characteristic of the PLC and influencing the performance of the PLC.

Description

PLC operation configuration monitoring method and device, storage medium and electronic equipment
Technical Field
The present disclosure relates to the field of industrial control and safety, and in particular, to a PLC operation configuration monitoring method and apparatus, a storage medium, and an electronic device.
Background
With the development of science and technology and the development of industrial fields, industrial control technology is gradually and widely applied to industrial production. A Programmable Logic Controller (PLC) is an indispensable device in industrial control technology, wherein the PLC includes a Programmable memory in which operating instructions such as executing Logic operations are stored, and various types of mechanical devices are controlled by input and output of digital signals or analog signals to perform industrial production.
With the industrial control system in the industrial control technology converted from closed to interconnected, the PLC is configured with the Ethernet communication module, so that an attacker can maliciously attack the PLC through a network, including tampering attack means such as the operation parameters of an application system of the PLC, maliciously modifying I/O pin configuration and the like, and the PLC inputs error instructions to each mechanical device, so that industrial production is damaged, and therefore, the safety problem of PLC operation configuration is particularly important.
In order to avoid the network security problem caused by the vulnerability of the PLC application system, in the prior art, a physical lock included in the PLC application system itself is usually used to lock the internal program code and the configuration data of the PLC. However, although this method can achieve safety protection for the PLC application system, the characteristics of the PLC programmable logic are severely limited, and the performance of the PLC is affected.
Disclosure of Invention
The present disclosure provides a PLC operation configuration monitoring method, device, storage medium, and electronic device, to partially solve the above problems in the prior art.
The technical scheme adopted by the specification is as follows:
the present specification provides a PLC operation configuration monitoring method, including:
sending a data acquisition instruction to a Programmable Logic Controller (PLC), acquiring and storing reference check data obtained by encoding functional control data contained in each configuration unit in the PLC through the data acquisition instruction;
when the PLC runs, sending a verification instruction to the PLC to acquire data to be verified, which is obtained by encoding the current function control data contained in each configuration unit in the PLC;
and monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data.
Optionally, a data acquisition instruction is sent to a programmable logic controller PLC, so as to acquire, through the data acquisition instruction, reference calibration data obtained by encoding functional control data included in each configuration unit in the PLC, and store the reference calibration data, specifically including:
sending a data acquisition instruction to the PLC, so as to acquire and store reference check data obtained by encoding function control data contained in a configuration unit with an invariable unit type in the PLC through the data acquisition instruction;
when the PLC operates, a verification instruction is sent to the PLC to obtain data to be verified, which is obtained by encoding the current function control data included in each configuration unit in the PLC, and the method specifically includes:
and when the PLC operates, sending a verification instruction to the PLC so as to obtain data to be verified after encoding the function control data contained in the configuration unit with the unit type being the invariable type in the PLC.
Optionally, the method includes sending a data acquisition instruction to a programmable logic controller PLC, so as to acquire, through the data acquisition instruction, reference verification data obtained by encoding functional control data included in each configuration unit in the PLC, and specifically includes:
sending the data acquisition instruction to the PLC, so that the PLC encodes the function control data contained in each configuration unit in the PLC according to the data acquisition instruction to obtain the verification data of each configuration unit, and returning;
and obtaining the reference verification data of the PLC according to the received verification data of each configuration unit returned by the PLC.
Optionally, obtaining the reference verification data of the PLC according to the received verification data of each configuration unit returned by the PLC specifically includes:
determining a received protocol frame which is returned by the PLC and contains the verification data of each configuration unit, and analyzing the protocol frame to obtain the configuration unit name of each configuration unit and the verification data of each configuration unit;
and coding the configuration unit name of each configuration unit and the verification data of each configuration unit according to a preset coding rule to obtain the reference verification data of the PLC.
Optionally, according to a preset encoding rule, encoding the configuration unit name of each configuration unit and the verification data of each configuration unit to obtain the reference verification data of the PLC, specifically including:
for each configuration unit, determining a data segment formed by the configuration unit in the reference verification data according to the configuration unit name of the configuration unit, the configuration unit name length of the configuration unit, the verification data of the configuration unit and the verification data length of the configuration unit, and taking the data segment as a data segment corresponding to the configuration unit;
and arranging the data segments corresponding to the configuration units according to a preset sequence to obtain an arrangement result, encoding the arrangement result, the total data length of the data contained in the configuration units, the unit type identification corresponding to the configuration units and the number of the unit types related to the configuration units, and determining the reference verification data of the PLC.
Optionally, when the PLC operates, sending a verification instruction to the PLC specifically includes:
and when the PLC operates, sending a verification instruction to the PLC every set period.
Optionally, monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data, specifically including:
when the data to be verified and the reference verification data are determined to be consistent, determining that the current operation configuration of the PLC is normal;
and when the data to be verified and the reference verification data are determined to be inconsistent, determining that the current operation configuration of the PLC is abnormal, and recovering the function control data of at least part of configuration units in the PLC.
Optionally, the recovering of the function control data of at least part of the configuration units in the PLC specifically includes:
decoding the data to be verified to obtain function control data of each configuration unit when the PLC operates, wherein the function control data is used as function control data to be recovered;
for each configuration unit, comparing the function control data to be recovered corresponding to the configuration unit with the reference function control data corresponding to the configuration unit to judge whether the configuration unit is abnormal, wherein the reference function control data corresponding to the configuration unit is the function control data of each configuration unit of the PLC, which is obtained by decoding the reference verification data;
and if the configuration unit is determined to be abnormal, performing data recovery on the configuration unit through the reference function control data corresponding to the configuration unit.
This specification provides a PLC operation configuration monitoring devices, includes:
the reference check data generation module is used for sending a data acquisition instruction to the Programmable Logic Controller (PLC), acquiring and storing reference check data obtained by encoding functional control data contained in each configuration unit in the PLC through the data acquisition instruction;
the system comprises a to-be-verified data generation module, a verification command generation module and a verification processing module, wherein the to-be-verified data generation module is used for sending a verification command to the PLC when the PLC operates so as to acquire to-be-verified data obtained after coding functional control data currently contained in each configuration unit in the PLC;
and the monitoring module is used for monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data.
The present specification provides a computer-readable storage medium storing a computer program, which when executed by a processor implements the PLC operation configuration monitoring method described above.
The present specification provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the PLC operation configuration monitoring method when executing the program.
The technical scheme adopted by the specification can achieve the following beneficial effects:
in the PLC operation configuration monitoring method provided in this specification, a data acquisition instruction is first sent to the PLC, so as to obtain and store reference calibration data of the PLC. And when the PLC operates, sending a verification instruction to the PLC so as to obtain the current data to be verified of the PLC. And monitoring the PLC operation configuration according to the current data to be verified and the reference verification data of the PLC.
It can be seen from the above method that the data to be verified of the PLC in the method is obtained based on the function control data of each configuration unit in the current PLC, and therefore, the PLC configuration can be monitored only according to the data to be verified and the reference verification data, that is, whether the function control data of each configuration unit in the PLC is tampered or not is determined. The method can effectively monitor the operation configuration of the PLC, and also avoids the problems of limiting the programmable characteristic of the PLC and influencing the performance of the PLC.
Drawings
The accompanying drawings, which are included to provide a further understanding of the specification and are incorporated in and constitute a part of this specification, illustrate embodiments of the specification and together with the description serve to explain the principles of the specification and not to limit the specification in a limiting sense. In the drawings:
fig. 1 is a schematic flow chart of a PLC operation configuration monitoring method in the present specification;
FIG. 2 is a schematic diagram of the structure of the code provided in this specification;
fig. 3 is a schematic flow chart of encoding and decoding provided in the present specification;
fig. 4 is a schematic diagram of a PLC operation configuration monitoring apparatus provided in the present specification;
fig. 5 is a schematic diagram of units included in a PLC operation configuration monitoring apparatus provided in the present specification;
fig. 6 is a schematic diagram of an electronic device corresponding to fig. 1 provided in the present specification.
Detailed Description
In order to make the objects, technical solutions and advantages of the present disclosure more clear, the technical solutions of the present disclosure will be clearly and completely described below with reference to the specific embodiments of the present disclosure and the accompanying drawings. It is to be understood that the embodiments described are only a few embodiments of the present disclosure, and not all embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments in the present specification without any creative effort belong to the protection scope of the present specification.
A Programmable Logic Controller (PLC) is a digital arithmetic operation electronic system that is used in an industrial environment, and the PLC uses a programmable memory in which commands for performing operations such as logic operation, sequence control, timing, technical and arithmetic operations are stored, and causes a machine to perform a production operation in accordance with a predetermined program by transmitting a digital signal or an analog signal to the machine connected to the programmable memory.
In actual operation, the PLC is usually used as a lower computer, the upper computer sends a control instruction to the PLC through a network communication mode, and the PLC can control mechanical equipment connected with the PLC to perform industrial production according to the received control instruction sent by the upper computer.
The PLC can receive the control command sent by the upper computer in a network communication mode, so that the PLC is easy to be attacked by a network. An attacker can attack the PLC through a network, for example, malicious codes are injected, and the operation parameters of each configuration unit in the PLC are modified through the network, so that the PLC outputs an error instruction to mechanical equipment, and a production field is damaged.
In order to avoid the above network security problem, currently, a mode of monitoring a network communication message is usually adopted to monitor the security condition of the PLC operation configuration. Specifically, the network message of the PLC is captured, then, the tag of the configuration file and the complete configuration file are extracted from the extracted network message, and according to the tag of the extracted configuration file, the complete configuration file corresponding to the last downloaded message matched with the tag is found and compared, so as to achieve the effect of security monitoring. However, this method can only monitor the downloading operation process in the PLC application system, and other operation processes, such as network configuration, configuration file uploading, etc., cannot be monitored.
In addition, in the prior art, the physical lock of the PLC is adopted to lock codes, configuration and the like in the PLC so as to play a role of safety protection, but after the method is adopted, a worker can not modify the codes and other configuration parameters of the PLC according to other requirements subsequently, the usability of the PLC is reduced, and the programmable characteristic of the PLC is severely limited.
The technical solutions provided by the embodiments of the present description are described in detail below with reference to the accompanying drawings.
Fig. 1 is a schematic flow chart of a PLC operation configuration monitoring method in this specification, which specifically includes the following steps:
s100: and sending an identifier generation instruction to the PLC so as to enable the PLC to generate and return the identifiers of the configuration units contained in the PLC.
For convenience of description, the PLC operation configuration monitoring method provided in this specification will be described below by taking only the execution subject as a server as an example, where the execution subject of the PLC operation configuration monitoring method provided in this specification may be a server or an upper computer capable of communicating with the PLC through a network.
The PLC includes a plurality of configuration units, where configuration means tools, methods, and processes provided in an application program to complete a certain task in a project, and a user can complete a required function in a manner similar to "building blocks" without writing a computer program, and each module constituting the configuration is referred to as a configuration unit in this specification.
Firstly, a core thought of the PLC operation configuration monitoring method provided in this specification is explained: before starting operation, the server actively interacts with the PLC, namely sends a data acquisition instruction to the PLC so as to acquire calibration data of the PLC, which is obtained by encoding the function controller data of each configuration unit in the PLC at present, and the calibration data is used as reference calibration data. In the embodiment of the present specification, it is considered that the function control data of each configuration unit inside the current PLC is authentic and has not been tampered by an attacker, that is, the PLC controls the mechanical device connected to the PLC according to the function control data of each configuration unit, so that the industrial production operation can be normally performed.
And then, when the operation of the PLC is determined, monitoring the operation configuration of the PLC, namely, sending a verification instruction to the PLC according to a preset monitoring period to obtain verification data obtained by encoding the function control data of each configuration unit of the PLC in the current monitoring period as data to be verified. The server can compare the data to be verified with the reference verification data to monitor the operation configuration of the PLC, that is, when the data to be verified is consistent with the reference verification data, it indicates that the function control data included in each configuration unit in the PLC in the current monitoring period is not tampered, and determines that the operation configuration of the PLC in the current monitoring period is normal.
Based on the core thought of the scheme, in order to avoid the network attack to the PLC when the PLC just starts to operate, a data acquisition instruction can be sent to the PLC before the PLC operates, and the data is checked and stored according to the reference of the current PLC.
Specifically, the server may send a data acquisition instruction to the PLC according to a communication protocol, so that when receiving the data acquisition instruction, the PLC generates the verification data of each configuration unit according to the function control data included in the current configuration unit of the PLC, and returns the verification data to the server. The server encodes the received verification data of each configuration unit returned by the PLC to obtain the current verification data of the PLC as the reference verification data, or may be understood as configuring the current verification data of the PLC generated by the server as the reference verification data.
In order to avoid a network attack to which an application system of the PLC may be subjected as much as possible, in the real-time example of the present specification, the server may further send a data acquisition instruction to the PLC through a hardware communication protocol.
In addition, as can be seen from the above description, since the PLC has not yet started operating, even the PLC has not yet performed network connection, and there is only a very small possibility that the function control data included in each configuration unit in the PLC is subjected to network attack, in this embodiment of the present specification, it is assumed that the verification data of each configuration unit returned by the PLC, which is received by the server at this time, is accurate and has not been tampered. In addition, in order to recover the function control data of at least part of the configuration units of the PLC after the attack, the PLC may return the function control data of all the current configuration units to the server, and the server may store the function control data after receiving the function control data.
Since the server and the PLC perform data transmission through a communication protocol, the verification data of each configuration unit of the PLC received by the server is returned in the form of a protocol frame. In the embodiment of the present disclosure, the monitoring of the operating configuration of the PLC mainly plays a key role in the verification data of each configuration unit, and therefore, the server needs to extract the verification data of each configuration unit from the received protocol frame returned by the PLC. And then, coding the verification data of each configuration unit extracted from the protocol frame according to a preset coding rule to obtain the verification data of the current PLC, wherein the verification data is used as reference verification data, and the reference verification data is stored so as to carry out subsequent monitoring operation.
S102: and when the PLC operates, sending a verification instruction to the PLC so as to obtain data to be verified, which is obtained after the functional control data contained in each configuration unit in the PLC at present is coded.
In actual operation, after the server determines to acquire the reference verification data of the PLC, the monitoring on the running configuration of the PLC is started.
Specifically, when the server determines that the PLC is running, the server sends a calibration instruction to the PLC according to a preset monitoring period, that is, the server sends the calibration instruction to the PLC every other preset period. After receiving the verification instruction, the PLC may return the verification data of each configuration unit in the current monitoring period to the server according to the operation in step S100, that is, based on the function control data of each configuration unit in the current period, generate the verification data of each configuration unit, and return the verification data in the form of a protocol frame, where the protocol frame at least includes the verification data of each configuration unit. The period, that is, the monitoring period of the server for monitoring the operation configuration of the PLC, may set the period duration according to actual requirements, and this specification does not limit this.
The server obtains the verification data of the PLC in the current period as the data to be verified according to the operation mentioned in step S100, that is, the server analyzes the protocol frame including the verification data of each configuration unit returned by the PLC in the current period to obtain the configuration unit names of each configuration unit of the PLC in the current period and the verification data of each configuration unit, and encodes the configuration unit names and the verification data to obtain the verification data of the PLC in the current period as the data to be verified.
S104: and monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data.
Specifically, the server may compare data to be verified of the PLC in the current period with reference verification data of the PLC, and determine whether the data to be verified is consistent with the reference verification data.
When the data to be verified is determined to be consistent with the reference verification data, since the data to be verified is generated based on the function control data of each configuration unit of the PLC in the current period, similarly, the reference verification data is also based on the credible function control data which is not tampered with, and the verification data consistency represents that the function control data of each configuration unit of the PLC in the current period is consistent with the credible function control data which is not tampered with, so that the operation configuration of the PLC in the current period can be determined to be normal.
When the data to be verified is determined to be inconsistent with the reference verification data, the functional control data of at least part of configuration units of the PLC in the current period are tampered, the operation configuration of the PLC in the current period can be determined to be abnormal, and the server can recover the functional control data of at least part of configuration units in the PLC.
Specifically, the server may decode the data to be verified to obtain verification data of each configuration unit of the PLC in the current period, and then determine the function control data of each configuration unit in the current period according to the obtained verification data of each configuration unit of the PLC in the current period, as the function control data to be recovered.
For each configuration unit, comparing the function control data to be recovered of the configuration unit with the reference function control data of the configuration unit to determine whether the configuration unit is abnormal, that is, when the function control data to be recovered of the configuration unit is consistent with the reference function control data of the configuration unit, it indicates that the tampered function control data to be recovered does not belong to the configuration unit.
When the functional control data to be recovered of the configuration unit is determined to be inconsistent with the reference functional control data of the configuration unit, determining that the configuration unit is abnormal, and performing data recovery on the current functional control data (functional data to be recovered) of the configuration unit according to the reference functional control data of the configuration unit, namely recovering the functional control data to be recovered of the configuration unit to be consistent with the reference functional control data of the configuration unit.
In addition, when the server determines that the current PLC operation configuration is abnormal, the server can directly use the pre-stored function control data of each configuration unit of the PLC as a reference to perform data recovery on all the configuration units of the current PLC.
Based on the PLC operation configuration monitoring method shown in fig. 1, the data to be verified during the operation of the PLC in the method is obtained based on the function control data of each configuration unit in the current PLC, so that the PLC can be monitored only according to the data to be verified and the reference verification data, that is, whether the function control data of each configuration unit in the PLC is tampered is determined. The method can effectively monitor the operation configuration of the PLC, and also avoids the problems of limiting the programmable characteristic of the PLC and influencing the performance of the PLC.
For the step of acquiring and encoding the function control data included in each configuration unit in the PLC through the data acquisition command in step S100, the specific operation steps are as follows: the PLC responds to a received data acquisition instruction sent by the server, and aiming at each configuration unit in the PLC, an arithmetic unit in the PLC encodes the function control data of the configuration unit through a Hash algorithm based on the function control data of the configuration unit, so that verification data of the configuration unit is obtained, wherein the verification data is a string of characters capable of reflecting the function control data of the corresponding configuration unit, and the value of the verification data is unique and irreversible. In addition, the PLC may also generate the verification data of each configuration unit through other algorithms similar to a hash algorithm, which is not limited in this specification.
And the server encodes the check data returned by each configuration unit returned by the PLC according to a preset encoding rule. Specifically, the server may analyze the protocol frame including the verification data of each configuration unit returned by the PLC, so as to extract the configuration unit nouns of each configuration unit and the verification data of each configuration unit. For each configuration unit, determining a data end corresponding to the configuration unit according to the configuration unit name of the configuration unit, the configuration unit name length of the configuration unit, the verification data of the configuration unit, and the verification data length of the configuration unit, then arranging the data segments corresponding to the configuration units according to a preset sequence to obtain an arrangement result, then encoding the arrangement result, the total data length of the data included in each configuration unit, the unit type identifier corresponding to each configuration unit, and the unit type number related to each configuration unit (i.e., the number of the configuration units included in the unit type), determining the reference verification data of the PLC, and obtaining a data structure of the basic verification data after encoding as shown in fig. 2. The server may generate reference verification data of the PLC according to S ═ cell type identifier + total data length of data included in each configuration cell + number of cell types related to each configuration cell + first configuration cell name length + configuration cell name of first configuration cell + verification data length of first configuration cell + verification data of first configuration cell + × + second configuration cell name length + configuration cell name … … of second configuration cell, and then through a secure hash algorithm 1 (SecureHashAlgorithm 1, SHA-1) algorithm, the SHA-1 algorithm may be represented by a formula H1 ═ SHA-1 (S). And then, the server can bind the reference verification data of the PLC and the data obtained through SHA-1 (S) and store the data into a server memory, and then bind the reference verification data of the PLC and the current configuration project.
In addition, since the verification data of each configuration unit returned by the PLC is obtained by encoding the function verification data of each current configuration unit, the server can monitor the operation configuration of the PLC only by the verification data of each configuration unit, and therefore, the server can also use the verification data of each configuration unit as the reference verification data of the PLC and store the verification data. The server recodes the received check data of each configuration unit, which can be regarded as compression of the check data of each configuration unit, so as to save storage resources of the server. In summary, in the embodiment of the present disclosure, the server may directly use the verification data of each configuration unit as the reference verification data, and may further encode the reference verification data to use the encoded verification data as the reference verification data of the PLC, which is not limited in this disclosure.
Similarly, in the running process of the PLC, through the verification instruction, the server may obtain, as the reference verification data, the verification data of each configuration unit generated based on the current function control data of each configuration unit returned by the PLC, or may also obtain, as the reference verification data, the verification data of the PLC encoded by the received verification data of each configuration unit, which is not limited in this specification. When the PLC operates, the server may generate the acquired verification data of each configuration unit as the to-be-verified data of the PLC in the current period by using the following formula: s '= cell type identification + total data length of data included in each configuration cell + number of cell types related to each configuration cell + first configuration cell name length + configuration cell name of first configuration cell + check data length of first configuration cell + check data of first configuration cell + configuration cell name … … of second configuration cell + configuration cell name of second configuration cell, and data to be checked of PLC in the current cycle H2= SHA-1 (S'). At this time, the contents of the verification data and the like of each configuration unit included in S' are generated based on the function control data of each configuration unit in the current cycle, and are not necessarily the same as the verification data of each configuration unit for generating the reference verification data of the PLC.
Furthermore, the PLC can also directly return the function control data contained in each configuration unit, and the server encodes the received function control data of each configuration unit to obtain the reference verification data and the data to be verified of the PLC. That is, the encoding step may be executed by the PLC, or may be executed by the server that acquires the function control data of each configuration unit of the PLC.
In addition, in order to ensure that the function control data of each configuration unit on which the reference verification data of the PLC is based is authentic, in this embodiment of the present specification, before the reference verification data is obtained through encoding, the server may first send a prompt signal, for example, by turning on a signal lamp, to prompt a worker to confirm whether the function control data of each configuration unit in the PLC is correct data, and after receiving a data determination message executed by the worker on the server, encode the function control data of each configuration unit to obtain the reference verification data of the PLC.
The number of protocol frames returned by the PLC is dependent on the communication protocol between the server and the PLC. According to the communication protocol between the server and the PLC, the PLC may process the check data of each configuration unit into one protocol frame and return the protocol frame, or may process the check data of the configuration unit into one protocol frame only including the check data of the configuration unit and return the protocol frame for each configuration unit, and in this case, the number of configuration units included in the PLC is the same as the number of protocol frames received by the server. The number of the protocol frames specifically returned by the PLC may be one, or may also be multiple, that is, the PLC may return at least one protocol frame to the server, which is not limited in this specification.
It should be noted that, the PLC includes various types of configuration units, but only the configuration units with the unit type being the unchangeable type include functional control data that affect the entire industrial production, while the configuration units with other unit types include data that do not affect the industrial production generally, that is, it is required to ensure that the functional control data of the unchangeable type configuration units are not tampered while the PLC is running. Therefore, before the PLC returns the verification data of each configuration unit to the server, the PLC may first perform screening, and only return the verification data of the configuration unit with the invariable unit type, or the PLC may return the verification data of all the configuration units therein to the server, and the server encodes only the verification data of the configuration unit with the invariable unit type to generate the reference verification data or the data to be verified of the PLC, which is not limited in this specification.
When the PLC or the server screens the configuration units, the configuration units can be screened according to the configuration unit names of the configuration units. For example, there are 3 configuration cells in the PLC, the configuration cell names of which are configuration cell a, configuration cell B, and configuration cell C, respectively, and only the configuration cell type of configuration cell C is an immutable type. Therefore, the PLC may screen all the configuration units according to the configuration unit name of the target configuration unit, i.e., the configuration unit C, and search for the configuration unit with the configuration unit name of the configuration unit C. In addition, other methods may be used to screen each configuration unit, which is not limited in this specification.
And monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data. The server monitors the data to be verified and the reference verification data by a method of comparing the data to be verified and the reference verification data, and specifically, as described above, the data to be verified and the reference verification data are a string of data strings, the server may use a string search (KMP) algorithm to compare the data to be verified and the reference verification data. In addition, the server may also adopt other comparison methods, which are not limited in this specification.
In addition, in the embodiment of the present disclosure, the server encodes the check data of each configuration unit, and decodes the encoded check data when recovering the data, as shown in fig. 3.
Based on the same idea, the PLC operation configuration monitoring method provided in one or more embodiments of the present specification further provides a corresponding PLC operation configuration monitoring device, as shown in fig. 4.
Fig. 4 is a schematic view of a PLC operation configuration monitoring device provided in this specification, which specifically includes:
a reference verification data generation module 410, a to-be-verified data generation module 420, and a monitoring module 430, wherein:
the reference verification data generation module 410 is configured to send a data acquisition instruction to a programmable logic controller PLC, so as to acquire and store reference verification data obtained by encoding functional control data included in each configuration unit in the PLC through the data acquisition instruction;
the to-be-verified data generating module 420 is configured to send a verification instruction to the PLC when the PLC operates, so as to obtain to-be-verified data obtained by encoding the current function control data included in each configuration unit in the PLC;
the monitoring module 430 is configured to monitor a current operation configuration of the PLC according to the data to be verified and the reference verification data.
Optionally, the reference verification data generating module 410 is specifically configured to send a data obtaining instruction to the PLC, so as to obtain, through the data obtaining instruction, reference verification data obtained by encoding the function control data included in the configuration unit of which the unit type is an unchangeable type in the PLC, and store the reference verification data; the to-be-verified data generating module 420 is specifically configured to send a verification instruction to the PLC when the PLC operates, so as to obtain to-be-verified data obtained by encoding the function control data included in the configuration unit of which the unit type is the invariable type in the PLC.
Optionally, the reference verification data generating module 410 is specifically configured to send the data obtaining instruction to the PLC, so that the PLC encodes, according to the data obtaining instruction, the function control data included in each configuration unit in the PLC, obtains the verification data of each configuration unit, and returns the verification data; and obtaining the reference verification data of the PLC according to the received verification data of each configuration unit returned by the PLC.
Optionally, the reference verification data generating module 410 is specifically configured to determine a received protocol frame including verification data of each configuration unit, which is returned by the PLC, and analyze the protocol frame to obtain a name of each configuration unit and the verification data of each configuration unit; and coding the configuration unit name of each configuration unit and the verification data of each configuration unit according to a preset coding rule to obtain the reference verification data of the PLC.
Optionally, the reference verification data generating module 410 is specifically configured to, for each configuration unit, determine, according to the name of the configuration unit, the name length of the configuration unit, the verification data of the configuration unit, and the verification data length of the configuration unit, a data segment formed by the configuration unit in the reference verification data, as a data segment corresponding to the configuration unit; and arranging the data segments corresponding to the configuration units according to a preset sequence to obtain an arrangement result, encoding the arrangement result, the total data length of the data contained in the configuration units, the unit type identifiers corresponding to the configuration units and the number of the unit types related to the configuration units, and determining the reference verification data of the PLC.
Optionally, the to-be-verified data generating module 420 is specifically configured to send a verification instruction to the PLC every set period when the PLC operates.
Optionally, the monitoring module 430 is specifically configured to, when it is determined that the data to be verified and the reference verification data are consistent, determine that the current operating configuration of the PLC is normal; and when the data to be verified and the reference verification data are determined to be inconsistent, determining that the current operation configuration of the PLC is abnormal, and recovering the function control data of at least part of configuration units in the PLC.
Optionally, the monitoring module 430 is specifically configured to decode the data to be verified to obtain function control data of each configuration unit when the PLC is running, and use the function control data as function control data to be recovered; for each configuration unit, comparing the function control data to be recovered corresponding to the configuration unit with the reference function control data corresponding to the configuration unit to judge whether the configuration unit is abnormal, wherein the reference function control data corresponding to the configuration unit is the function control data of each configuration unit of the PLC, which is obtained by decoding the reference verification data; and if the configuration unit is determined to be abnormal, performing data recovery on the configuration unit through the reference function control data corresponding to the configuration unit.
As shown in fig. 5, each module in the PLC operation configuration monitoring device provided in the present specification is further described in detail, wherein:
the reference verification data generation module 410 may include: the first sending unit 411 is configured to send a data obtaining instruction to the PLC, the first receiving unit 412 is configured to receive check data of each configuration unit and function control data of each configuration unit returned by the PLC, and the first encoding unit 413 is configured to perform an encoding operation on the received check data of each configuration unit to obtain reference check data of the PLC.
The to-be-verified data generation module 420 may include: the second sending unit 421 is configured to send a PLC verification instruction, the second receiving unit 422 is configured to receive verification data of each configuration unit and function control data of each configuration unit returned when the PLC operates in the current monitoring period, and the second encoding unit 423 is configured to perform an encoding operation on the received verification data of each configuration unit returned when the PLC operates in the current monitoring period, so as to obtain data to be verified of the PLC.
The monitoring module 430 may include: the comparison unit 431 is configured to compare data to be verified of the PLC with reference verification data, determine whether the data to be verified is consistent with the reference verification data, and monitor the operation configuration of the PLC, and further includes a recovery unit 432 configured to perform data recovery on a configuration unit with abnormal data when it is determined that the operation configuration of the PLC is abnormal, and continue to monitor the operation configuration of the PLC after the recovery.
The present specification also provides a computer-readable storage medium storing a computer program, which can be used to execute the PLC operation configuration monitoring method provided in fig. 1.
This specification also provides a schematic block diagram of the electronic device shown in fig. 6. As shown in fig. 6, at the hardware level, the electronic device includes a processor, an internal bus, a network interface, a memory, and a non-volatile memory, but may also include hardware required for other services. The processor reads a corresponding computer program from the non-volatile memory into the memory and then runs the computer program, so as to implement the PLC running configuration monitoring method described in fig. 1. Of course, besides the software implementation, the present specification does not exclude other implementations, such as logic devices or a combination of software and hardware, and the like, that is, the execution subject of the following processing flow is not limited to each logic unit, and may be hardware or logic devices.
In the 90's of the 20 th century, improvements to a technology could clearly distinguish between improvements in hardware (e.g., improvements to circuit structures such as diodes, transistors, switches, etc.) and improvements in software (improvements to process flow). However, as technology advances, many of today's process flow improvements have been seen as direct improvements in hardware circuit architecture. Designers almost always obtain the corresponding hardware circuit structure by programming an improved method flow into the hardware circuit. Thus, it cannot be said that an improvement in the process flow cannot be realized by hardware physical modules. For example, a Programmable Logic Device (PLD), such as a Field Programmable Gate Array (FPGA), is an integrated circuit whose Logic functions are determined by programming the Device by a user. A digital system is "integrated" on a PLD by the designer's own programming without requiring the chip manufacturer to design and fabricate application-specific integrated circuit chips. Furthermore, nowadays, instead of manually manufacturing an Integrated Circuit chip, such Programming is often implemented by "logic compiler" software, which is similar to the software compiler used in program development, but the original code before compiling is also written in a specific Programming Language, which is called Hardware Description Language (HDL), and the HDL is not only one kind but many kinds, such as abel (advanced boot Expression Language), ahdl (alternate Language Description Language), communication, CUPL (computer universal Programming Language), HDCal (Java Hardware Description Language), langa, Lola, mylar, HDL, PALASM, rhydl (runtime Description Language), vhjhdul (Hardware Description Language), and vhygl-Language, which are currently used commonly. It will also be apparent to those skilled in the art that hardware circuitry for implementing the logical method flows can be readily obtained by a mere need to program the method flows with some of the hardware description languages described above and into an integrated circuit.
The controller may be implemented in any suitable manner, for example, the controller may take the form of, for example, a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller, and an embedded microcontroller, examples of which include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320, the memory controller may also be implemented as part of the control logic for the memory. Those skilled in the art will also appreciate that, in addition to implementing the controller as pure computer readable program code, the same functionality can be implemented by logically programming method steps such that the controller is in the form of logic gates, switches, application specific integrated circuits, programmable logic controllers, embedded microcontrollers and the like. Such a controller may thus be considered a hardware component, and the means included therein for performing the various functions may also be considered as a structure within the hardware component. Or even means for performing the functions may be regarded as being both a software module for performing the method and a structure within a hardware component.
The systems, devices, modules or units illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product with certain functions. One typical implementation device is a computer. In particular, the computer may be, for example, a personal computer, a laptop computer, a cellular telephone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
For convenience of description, the above devices are described as being divided into various units by function, and are described separately. Of course, the functions of the various elements may be implemented in the same one or more software and/or hardware implementations of the present description.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Disks (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
As will be appreciated by one skilled in the art, embodiments of the present description may be provided as a method, system, or computer program product. Accordingly, the description may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the description may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
This description may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
The embodiments in the present specification are described in a progressive manner, and the same and similar parts among the embodiments are referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.
The above description is only an example of the present specification, and is not intended to limit the present specification. Various modifications and alterations to this description will become apparent to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present specification should be included in the scope of the claims of the present specification.

Claims (11)

1. A PLC operation configuration monitoring method is characterized by comprising the following steps:
sending a data acquisition instruction to a Programmable Logic Controller (PLC), so as to acquire and store reference verification data obtained by encoding functional control data contained in each configuration unit in the PLC through the data acquisition instruction;
when the PLC runs, sending a verification instruction to the PLC to acquire data to be verified, which is obtained by encoding the current function control data contained in each configuration unit in the PLC;
and monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data.
2. The method of claim 1, wherein sending a data acquisition command to a PLC so as to acquire and store reference check data obtained by encoding functional control data included in each configuration unit in the PLC through the data acquisition command comprises:
sending a data acquisition instruction to the PLC, so as to acquire and store reference check data obtained by encoding function control data contained in a configuration unit with an invariable unit type in the PLC through the data acquisition instruction;
when the PLC operates, a verification instruction is sent to the PLC to obtain data to be verified, which is obtained by encoding the current function control data included in each configuration unit in the PLC, and the method specifically includes:
and when the PLC operates, sending a verification instruction to the PLC so as to obtain data to be verified after encoding the function control data contained in the configuration unit with the unit type being the invariable type in the PLC.
3. The method of claim 1, wherein sending a data acquisition command to a Programmable Logic Controller (PLC) to acquire reference verification data obtained by encoding functional control data included in each configuration unit in the PLC through the data acquisition command comprises:
sending the data acquisition instruction to the PLC, so that the PLC encodes the function control data contained in each configuration unit in the PLC according to the data acquisition instruction to obtain the verification data of each configuration unit, and returning;
and obtaining the reference verification data of the PLC according to the received verification data of each configuration unit returned by the PLC.
4. The method of claim 3, wherein obtaining the reference calibration data of the PLC according to the received calibration data of each configuration unit returned by the PLC specifically comprises:
determining a received protocol frame which is returned by the PLC and contains the verification data of each configuration unit, and analyzing the protocol frame to obtain the configuration unit name of each configuration unit and the verification data of each configuration unit;
and coding the configuration unit name of each configuration unit and the verification data of each configuration unit according to a preset coding rule to obtain the reference verification data of the PLC.
5. The method according to claim 4, wherein the encoding of the configuration unit name of each configuration unit and the verification data of each configuration unit according to a preset encoding rule to obtain the reference verification data of the PLC includes:
for each configuration unit, determining a data segment formed by the configuration unit in the reference verification data according to the configuration unit name of the configuration unit, the configuration unit name length of the configuration unit, the verification data of the configuration unit and the verification data length of the configuration unit, and taking the data segment as a data segment corresponding to the configuration unit;
and arranging the data segments corresponding to the configuration units according to a preset sequence to obtain an arrangement result, encoding the arrangement result, the total data length of the data contained in the configuration units, the unit type identification corresponding to the configuration units and the number of the unit types related to the configuration units, and determining the reference verification data of the PLC.
6. The method of claim 1, wherein sending a verification instruction to the PLC while the PLC is running comprises:
and when the PLC operates, sending a verification instruction to the PLC every set period.
7. The method of claim 1, wherein monitoring a current operating configuration of the PLC according to the data to be verified and the reference verification data comprises:
when the data to be verified and the reference verification data are determined to be consistent, determining that the current operation configuration of the PLC is normal;
and when the data to be verified and the reference verification data are determined to be inconsistent, determining that the current operation configuration of the PLC is abnormal, and recovering the function control data of at least part of configuration units in the PLC.
8. The method of claim 7, wherein recovering functional control data of at least some configuration units in the PLC comprises:
decoding the data to be verified to obtain function control data of each configuration unit when the PLC operates, wherein the function control data is used as function control data to be recovered;
for each configuration unit, comparing the function control data to be recovered corresponding to the configuration unit with the reference function control data corresponding to the configuration unit to judge whether the configuration unit is abnormal, wherein the reference function control data corresponding to the configuration unit is the function control data of each configuration unit of the PLC, which is obtained by decoding the reference verification data;
and if the configuration unit is determined to be abnormal, performing data recovery on the configuration unit through the reference function control data corresponding to the configuration unit.
9. A PLC operation configuration monitoring device, comprising:
the reference check data generation module is used for sending a data acquisition instruction to the Programmable Logic Controller (PLC), acquiring and storing reference check data obtained by encoding functional control data contained in each configuration unit in the PLC through the data acquisition instruction;
the system comprises a to-be-verified data generation module, a verification command generation module and a verification command generation module, wherein the to-be-verified data generation module is used for sending a verification command to the PLC when the PLC operates so as to acquire to-be-verified data obtained by coding current function control data contained in each configuration unit in the PLC;
and the monitoring module is used for monitoring the current operation configuration of the PLC according to the data to be verified and the reference verification data.
10. A computer-readable storage medium, characterized in that the storage medium stores a computer program which, when executed by a processor, implements the method of any of the preceding claims 1 to 8.
11. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the method of any of claims 1 to 8 when executing the program.
CN202210539281.2A 2022-05-18 2022-05-18 PLC operation configuration monitoring method and device, storage medium and electronic equipment Active CN114647233B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210539281.2A CN114647233B (en) 2022-05-18 2022-05-18 PLC operation configuration monitoring method and device, storage medium and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210539281.2A CN114647233B (en) 2022-05-18 2022-05-18 PLC operation configuration monitoring method and device, storage medium and electronic equipment

Publications (2)

Publication Number Publication Date
CN114647233A true CN114647233A (en) 2022-06-21
CN114647233B CN114647233B (en) 2022-09-30

Family

ID=81997276

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210539281.2A Active CN114647233B (en) 2022-05-18 2022-05-18 PLC operation configuration monitoring method and device, storage medium and electronic equipment

Country Status (1)

Country Link
CN (1) CN114647233B (en)

Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1631868A1 (en) * 2003-06-12 2006-03-08 The Boc Group, Inc. Configurable plc and scada-based control system
CN102298373A (en) * 2011-06-30 2011-12-28 北京康拓红外技术有限公司 Monitoring method and monitoring system of programmable logic controller (PLC)
CN104199373A (en) * 2014-08-04 2014-12-10 大连派思燃气系统股份有限公司 PLC (Programmable Logic Controller) cabinet I/O (Input/Output) point calibration device and method
CN105302055A (en) * 2015-11-09 2016-02-03 北京工业大学 Safety monitoring system for programmable logic controller in industrial control system and method thereof
CN110515371A (en) * 2019-09-19 2019-11-29 潍柴动力股份有限公司 Detection method, the first controller and the ECU that ECU data is distorted
CN111142469A (en) * 2019-12-27 2020-05-12 北京和利时智能技术有限公司 Debugging method and debugging system for PLC configuration program
CN111562938A (en) * 2020-04-20 2020-08-21 杭州迪普科技股份有限公司 Method and device for checking configuration information of PLC and computer equipment
CN112181804A (en) * 2020-08-31 2021-01-05 五八到家有限公司 Parameter checking method, equipment and storage medium
CN112231687A (en) * 2020-10-23 2021-01-15 中国航天系统工程有限公司 Safety verification system and method for programmable industrial controller
CN113656220A (en) * 2021-08-06 2021-11-16 杭州安恒信息技术股份有限公司 PLC data baseline recovery method and device and computer storage medium
CN113791636A (en) * 2021-08-24 2021-12-14 上海机电工程研究所 System and method for controlling configurable execution
CN113872980A (en) * 2021-09-29 2021-12-31 浙江国利网安科技有限公司 Industrial control equipment information identification method and device, storage medium and equipment

Patent Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1631868A1 (en) * 2003-06-12 2006-03-08 The Boc Group, Inc. Configurable plc and scada-based control system
CN102298373A (en) * 2011-06-30 2011-12-28 北京康拓红外技术有限公司 Monitoring method and monitoring system of programmable logic controller (PLC)
CN104199373A (en) * 2014-08-04 2014-12-10 大连派思燃气系统股份有限公司 PLC (Programmable Logic Controller) cabinet I/O (Input/Output) point calibration device and method
CN105302055A (en) * 2015-11-09 2016-02-03 北京工业大学 Safety monitoring system for programmable logic controller in industrial control system and method thereof
CN110515371A (en) * 2019-09-19 2019-11-29 潍柴动力股份有限公司 Detection method, the first controller and the ECU that ECU data is distorted
CN111142469A (en) * 2019-12-27 2020-05-12 北京和利时智能技术有限公司 Debugging method and debugging system for PLC configuration program
CN111562938A (en) * 2020-04-20 2020-08-21 杭州迪普科技股份有限公司 Method and device for checking configuration information of PLC and computer equipment
CN112181804A (en) * 2020-08-31 2021-01-05 五八到家有限公司 Parameter checking method, equipment and storage medium
CN112231687A (en) * 2020-10-23 2021-01-15 中国航天系统工程有限公司 Safety verification system and method for programmable industrial controller
CN113656220A (en) * 2021-08-06 2021-11-16 杭州安恒信息技术股份有限公司 PLC data baseline recovery method and device and computer storage medium
CN113791636A (en) * 2021-08-24 2021-12-14 上海机电工程研究所 System and method for controlling configurable execution
CN113872980A (en) * 2021-09-29 2021-12-31 浙江国利网安科技有限公司 Industrial control equipment information identification method and device, storage medium and equipment

Also Published As

Publication number Publication date
CN114647233B (en) 2022-09-30

Similar Documents

Publication Publication Date Title
US20180081658A1 (en) Method and apparatus for firmware virtualization
CN105138376A (en) Mixed model application, webpage resource upgrading method thereof, mobile terminal and system
CN107092824B (en) Application program running method and device
JP2017509082A (en) Safe reading of data into non-volatile memory or secure elements
CN112565026B (en) Test frame generation method, device and equipment
CN110895503B (en) Application performance monitoring method and client
CN111753270B (en) Application program login verification method, device, equipment and storage medium
CN115033325A (en) Information display method, device and equipment
CN111930343A (en) Method, device and medium for acquiring random number and generating random number
CN111291427A (en) Server hard disk security measurement method and device
CN113254163B (en) Processing method and device of block chain data
CN114647233B (en) PLC operation configuration monitoring method and device, storage medium and electronic equipment
CN113703996A (en) Access control method, device and medium based on user and YANG model grouping
CN105791514B (en) Application starting monitoring method and device
CN108960384B (en) Decoding method of graphic code and client
CN108415827B (en) Application automation processing method, device, client and system
CN106293620B (en) Method for detecting parameters in Flash Rom by intel platform
CN113296832A (en) Data processing method and device and electronic equipment
CN109977331B (en) Method and device for controlling execution of page resources
CN113626524A (en) Data processing method and device and data checking system
CN112039971A (en) Data recording method and device, and data storage method and device
CN113239394B (en) Firmware protection method, device and equipment
CN113204746B (en) Identity recognition method and device, storage medium and electronic equipment
CN116450250B (en) Dynamic scenario execution method, system and storage medium
CN114489745B (en) Application service upgrading method and device and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant