CN209627714U

CN209627714U - A kind of hotspot monitoring device using single hotspot monitoring technology

Info

Publication number: CN209627714U
Application number: CN201920608176.3U
Authority: CN
Inventors: 龚海澎; 欧晓聪; 李明明; 王庭宇
Original assignee: Sichuan Yingsaike Technology Co Ltd
Current assignee: Sichuan Yingsaike Technology Co Ltd
Priority date: 2019-04-29
Filing date: 2019-04-29
Publication date: 2019-11-12
Anticipated expiration: 2029-04-29

Abstract

The utility model discloses a kind of hotspot monitoring devices using single hotspot monitoring technology, which includes technical grade host equipment, hotspot monitoring unit, hotspot main control unit and technical grade storage unit；The hotspot monitoring unit, hotspot main control unit and technical grade storage unit are connected with the technical grade host equipment respectively；Wherein, the hotspot main control unit includes monitoring modular, legitimacy judging module and Communication Monitoring module, and the monitoring modular is connected with legitimacy judging module, and the legitimacy judging module is connected with the Communication Monitoring module.Therefore, the utility model, which can effectively realize, quickly screens wireless channel comprehensive monitoring, the hotspot/wireless connectivity devices legitimacy in industrial control system environment, but also the access of illegal wireless hot spot is effectively taken precautions against, prevent illegal external connection event caused by the illegal access due to hotspot and occurs.

Description

A kind of hotspot monitoring device using single hotspot monitoring technology

Technical field

The utility model belongs to hotspot security fields, more particularly to a kind of a kind of using single under industrial control condition The hotspot monitoring device of hotspot monitoring technology.

Background technique

It deepens continuously with information-based and industrialization fusion, industrial control system moves towards interconnection from single machine, walks from closing To opening, move towards intelligent from automation.While productivity significantly improves, industrial control system is faced with increasingly serious Network security threats.In order to cope with these network security threats, it will usually by the real-time production control divisions of industrial control system It is divided into independent network, is physically separated.However, with the development of communication technology, WiFi technology relies on the advantage quilt of itself It is widely applied, while bringing extensive convenient for people, but brings biggish security risk, it is especially existing in Industry Control , use of hotspot can break through easily isolation network limit, should physically-isolated industrial control system be connected to On internet, great security risk is formed.Therefore, it in Industry Control scene, protects and requires for safety, do not permit usually Permitted the hotspot access for having illegal.But how to monitor in Industry Control site environment with the presence or absence of there is hotspot, have The presence of which hotspot is connected to some hotspot either with or without wireless device, how by illegal hotspot and conjunction The hot spot of method is distinguished, and issues warning information in time when finding illegal wireless hot spot, at present in industrial control system ring Border requires the lower corresponding solution of shortage.

The wireless WIFI network equipment of mainstream supports 802.11a/b/g/n/ac at present, and WIFI signal is in 2.4GHz frequency band The channel that can be used has 13, and channel number is from 2412MHz~2472MHz, each channel width from 1~13, centre frequency 20MHz；The channel that 5GHz frequency band can be used has 19, due to wherein there is a local channel overlapping, actually uses 13 therein, Channel number be 36,40,44,48,52,56,60,64,149,153,157,161,165, centre frequency from 5180MHz~ 5825MHz, each channel width are 20MHz.

Hotspot general at present finds device, does not adapt to the harsh environmental requirement of industrial control system, Bu Nengman Sufficient 7*24 hours lasting run without interruption requires.Hotspot discovery technique, can only scan to deposit to periphery used at present There is which hotspot, but is being the absence of the discrimination capabilities to these hotspot, it can not be by illegal hot spot from legal hot spot It screens.More lack the ability further monitored to hotspot, cannot continue to monitor whether hotspot has had Wireless device access, if wireless network communication is carried out by hotspot.

Utility model content

In order to solve the above-mentioned technical problem, the utility model aim is to provide a kind of use a kind of under industrial control condition The hotspot monitoring device of single hotspot monitoring technology, can not only effectively realize to the nothing in industrial control system environment Line channel comprehensive monitoring, hotspot/wireless connectivity devices legitimacy are quickly screened, but also effectively prevention illegal wireless heat The access of point prevents illegal external connection event caused by the illegal access due to hotspot and occurs, avoids industrial control system net Network is connected on internet by intentional or unintentional, plays active and effective safety protection function to industrial control system network.

In consideration of it, the utility model adopts the following technical solution:

A kind of hotspot monitoring device using single hotspot monitoring technology, wherein the hotspot monitoring device Including for provide system operation hardware and software platform technical grade host equipment, for detecting and transmitting hotspot information Hotspot monitoring unit, for what the hotspot/radio reception device legitimacy monitored was screened and was controlled The technical grade storage that hotspot main control unit and hotspot communication information for will monitor are recorded and saved is single Member；The hotspot monitoring unit, hotspot main control unit and technical grade storage unit respectively with the technical grade master Machine equipment is connected；Wherein, the hotspot main control unit includes the monitoring signals for parsing hotspot monitoring unit Monitoring modular, sentence for realizing the legitimacy screened to the hotspot/radio reception device legitimacy monitored Certainly module and the Communication Monitoring module for interaction transmitting court verdict and record information, the monitoring modular and legitimacy are adjudicated Module is connected, and the legitimacy judging module is connected with the Communication Monitoring module.

Preferably, the hotspot main control unit further includes the illegal access warning connecting with the Communication Monitoring module Module, for issuing alarm, early warning, notification message in time according to court verdict.

Preferably, the hotspot monitoring unit is connected by PCIe bus with the technical grade host equipment, and not It is interrupted the detection that the wireless WIFI channel of poll carries out hotspot, and the information detected is passed to by bus data interaction Hotspot main control unit.

Preferably, the wireless communication data of the Communication Monitoring module passes to technical grade storage by the interaction of SATA bus Unit is kept records of, while the data that reading is saved record from technical grade storage unit are closed for legitimacy judging module Method judgement and administrative staff have access to and check relevant information.

Compared with prior art, the utility model has the beneficial effect that

1, hotspot monitoring device described in the utility model is designed using the low-power consumption technical grade of 86 framework of non-x, can be steady Fixed work is at -40 DEG C~+70 DEG C, and the 7*24 hour that can satisfy industrial control system environment, which persistently runs without interruption, to be required, solution It has determined and the problem of continuing hotspot monitoring is carried out to industrial control system.

2, the utility model quickly controllably can carry out all standing monitoring to all WIFI channels, effectively prevent missing inspection WIFI channel.

3, the utility model may be implemented automatically to adjust the dynamic of the monitoring duration of WIFI channel, thus guaranteeing not leak To there are the WIFI channels of wireless signal to carry out emphasis monitoring while examining WIFI channel.

4, the utility model can be by the hotspot title of monitoring WIFI channel automatic collection work, and keeps to this Hot spot is recorded and is tracked, and convenient for the examination of subsequent progress hotspot/wireless connectivity devices legitimacy, effectively prevent failing to judge Hotspot and the judgement difficulty for reducing administrative staff.

5, the utility model may be implemented to the lasting record of wireless telecommunications and tracking, provide branch for the audit of wireless telecommunications Support, and data source is provided to communicate feature progress network data exchange depth analysis in conjunction with cable network.

6, the mass data storage provided by the utility model for meeting industrial control system environmental requirement, may be implemented pair Hotspot, wireless connectivity devices, wireless telecommunications record, hotspot black and white lists, the wireless connectivity devices monitored are black The safe and reliable long-time of white list information stores record, convenient to be tracked, check to various violation events, excludes in time Cyberthreat.

Detailed description of the invention

Fig. 1 is the basic framework schematic diagram of hotspot monitoring device described in the utility model embodiment.

Fig. 2 is the concrete structure schematic diagram of hotspot main control unit described in the utility model embodiment.

Specific embodiment

In order to be best understood from the creation thought of the utility model, the utility model embodiment is explained as follows herein:

As depicted in figs. 1 and 2, the utility model embodiment provides a kind of using the wireless of single hotspot monitoring technology Hot spot monitoring device, the hotspot monitoring device include that the technical grade host for providing the hardware and software platform of system operation is set Standby 10, the hotspot monitoring unit 20 for detecting and transmitting hotspot information, for the hotspot monitored/ The hotspot main control unit 30 that the legitimacy of radio reception device is screened and controlled and the wireless heat for will monitor The technical grade storage unit 40 that point communication information is recorded and saved；The hotspot monitoring unit 20, hotspot master Control unit 30 and technical grade storage unit 40 are connected with the technical grade host equipment 10 respectively；Wherein, the wireless heat Point main control unit 30 includes monitoring modular 31 for parsing the monitoring signals of hotspot monitoring unit 20, for realizing to prison The legitimacy judging module 32 and transmitted for interaction that the hotspot/radio reception device legitimacy measured is screened The Communication Monitoring module 33 of court verdict and record information, the monitoring modular 31 are connected with legitimacy judging module 32, institute Legitimacy judging module 32 is stated to be connected with the Communication Monitoring module 33.

The hotspot main control unit 30 further includes the illegal access warning mould connecting with the Communication Monitoring module 33 Block 34, for issuing alarm, early warning, notification message in time according to court verdict.In the utility model embodiment, the communication The wireless communication data of monitoring modular 33 passes to technical grade storage unit 40 by the interaction of SATA bus and keeps records of, while from The data for being saved record are read in technical grade storage unit 40 for the progress validity judgement of legitimacy judging module 32 and management Personnel, which have access to, checks relevant information.

In the utility model embodiment, the hotspot monitoring unit 20 passes through PCIe bus and the technical grade master Machine equipment 10 is connected, and the uninterrupted wireless WIFI channel of poll carries out the detection of hotspot, and the information detected is passed through Bus data interaction passes to hotspot main control unit 30.

Taking this, the utility model embodiment can satisfy the hotspot monitoring device of industrial control system environmental requirement, It being capable of lasting uninterrupted operation in 7*24 hours.The technical grade host equipment 10 provides the underlying hardware and software branch of system operation Platform is supportted, for accessing the technical grade storage unit 40 of hotspot monitoring monitoring unit 20 and large capacity, runs hotspot Main control unit 30；The technical grade host equipment 10 is the low-power consumption technical grade hardware design of 86 framework of non-x, and use is fan-free, nothing CPU fever is quickly transmitted to cabinet by special heat conducting pipe, is radiated certainly by casing by rotatable part structure；Nothing Line hot spot monitoring unit 20 is connected by PCIe bus with technical grade host equipment 10, always works in listening mode, uninterruptedly Poll is wireless, and WIFI channel carries out the detection of hotspot, and the information detected is passed to wirelessly by bus data interaction Hot spot main control unit 30.

Six software submodules included by the hotspot main control unit 30 are respectively that monitoring modular 31, legitimacy are sentenced Certainly module 32, Communication Monitoring module 33 and illegal access warning module 34, monitoring modular 31 by the hotspot monitored and Wireless connectivity devices are protected using wireless communication data by the technical grade storage unit 40 that the interaction of SATA bus passes to large capacity Deposit record, and from the technical grade storage unit 40 of large capacity read related data carried out for legitimacy judging module 32 it is legal Property judgement and administrative staff have access to and check relevant information.

In addition, the utility model embodiment stores monitored nothing by using the technical grade storage unit 40 of large capacity Line hot spot, wireless connectivity devices, wireless telecommunications record, hotspot black and white lists, wireless connectivity devices black and white lists.The above number According to storage time more than 12 months, when reaching the 80% of storage cap, issue prompt information, prompt administrative staff turn in time Store up data；When reaching storage cap, earliest historical record is covered using rollback mode.

Detailed description are as follows for hotspot monitoring method described in the utility model embodiment:

Step 1: hotspot monitoring unit 20 carries out comprehensive monitoring to all working channel using uninterrupted polling technique And it is arranged and is in listening mode, while is corresponding from 40 read work channel list of technical grade storage unit and each channel Working frequency and timeslice；

Step 2: hotspot/radio reception device title of work, and holding pair are obtained by monitoring channel Hotspot/radio reception device information is recorded and is tracked, and again to hotspot title/access nothing of work The title of the radio reception device of line hot spot carries out legitimacy and quickly identifies；

Step 3: Communication Monitoring module 33 parses the wireless signal monitored, therefrom obtains wireless telecommunications record, The hotspot information for participating in the wireless telecommunications, wireless connectivity devices information is recorded and is connected with technical grade host equipment 10 It in technical grade storage unit 40, and betters a record at any time, all relevant informations of the wireless telecommunications can be extracted when needed, make For the foundation being tracked to the wireless telecommunications.

In the utility model embodiment, the hotspot information includes SSID, BSSID and signal of hotspot Intensity, working channel, the time monitored and communication data packet length；The radio reception device information includes wireless device MAC Address, connection hotspot, time for monitoring and communication data packet length.

The hotspot monitoring unit 20 carries out comprehensive monitoring to all working channel using uninterrupted polling technique Specific method: first setting listening mode for hotspot monitoring unit 20, each channel distribution then monitored needs One timeslice, when the timeslice on a monitor channel then, automatically switch to it is next need on the channel monitored, it is complete In pairs after the monitoring of the last one monitoring channel, the monitoring movement of a new round, is so constantly followed since first monitors channel Ring is reciprocal.In the utility model embodiment, uninterrupted polling technique is applied in the channel switching of hotspot.Such as preceding institute It states, the WIFI channel one for needing to monitor shares 32, however hotspot monitoring unit 20 can only operate in one in synchronization It is to be set as supervising by hotspot monitoring unit 20 first to realize the comprehensive monitoring to all WIFI channels in a frequency Mode is listened, is then one timeslice of channel distribution that each needs to monitor, when the timeslice on a monitor channel arrives When, it automatically switches on next channel for needing to monitor, after completing the monitoring to the last one monitoring channel, is supervised from first The monitoring movement that channel starts a new round is surveyed, so constantly moves in circles, realizes the quick controllable all standing of all WIFI channels Hotspot monitoring.

The hotspot monitoring unit 20 is in addition to supervising all working channel using uninterrupted polling technique comprehensively Survey the emphasis monitoring that the working channel is also carried out using the monitoring weight that auto-adaptive time weight updates algorithm optimization WIFI channel Method include: the polling sequence of first given all monitored channels and the initial time leaf length of each working channel, time Leaf length is adjusted automatically during the work time.Time leaf length T automatic adjusting method during the work time are as follows: according to The adjustment of timeslice is carried out on the working channel monitored whether there is or not wireless signal, if monitoring wireless communication on some channel Number, then the time leaf length of the working channel adds T₁；If continuously monitoring wireless signal, time leaf length is increased continuously, and is made For the monitoring time leaf length of the working channel next time；When the time leaf length T of a working channel reaches T_maxWhen, then not It is further added by its time leaf length；If not monitoring wireless signal on a working channel, the time length of a film of the working channel Degree reduces T₂, as the monitoring time leaf length of the working channel next time, if not monitoring wireless signal, time continuously Leaf length continuously reduces, until being decreased to T_minAfter do not continue to reduce.

In the utility model embodiment, in order to guarantee monitoring efficiency, algorithm optimization is updated using auto-adaptive time weight The monitoring weight of WIFI channel realizes the emphasis monitoring to the channel with this.In the initial state, working site whether there is nothing Line hot spot be it is unknown, how many hotspot and these hotspot used which channel be also it is unknown, it is therefore, first The polling sequence of all monitoring channels and the initial time leaf length T of each channel 200ms are first given, the time, leaf length T was in work It is adjusted automatically during making.The strategy of adjustment are as follows: carry out timeslice whether there is or not wireless signal according on the channel monitored Adjustment, if monitoring wireless signal on some working channel, the time leaf length of the working channel adds T₁And T₁= 200ms continuously monitors wireless signal, then time leaf length T is increased continuously, to prevent from stopping on a monitoring channel Overlong time and miss the wireless signal on other working channels, set the time leaf length maximum of T of single working channel_max For 2000ms, once the time leaf length of some working channel reaches this maximum of T_max, it is not further added by its time leaf length； If not monitoring wireless signal on some working channel, time leaf length T of the working channel reduces T₂And T₂= 100ms, as the monitoring time leaf length of the working channel next time, if not monitoring wireless signal, timeslice continuously Length continuously reduces, and the channel is almost completely neglected in order to prevent, sets the time leaf length minimum value T of single working channel_minFor 100ms, once the time leaf length of some working channel reaches this minimum value T_min, no longer reduce its time leaf length.Cause This, the utility model embodiment passes through the above optimization method, it is ensured that there are the weights of the WIFI channel of hotspot signal Point monitoring.

It is fast that the title of hotspot title/access hotspot radio reception device of described pair of work carries out legitimacy The title that speed is identified by the hotspot title/access hotspot radio reception device that will be monitored is deposited with technical grade Hotspot black and white lists and signal strength, radio reception device black and white lists in storage unit 40 carry out verifying matching identification.

In the utility model embodiment, the utility model obtains the nothing of work by monitoring channel (WIFI channel) Line hotspot name, and keep the method that the hot spot is recorded and tracked.Monitoring modular 31 is to hotspot monitoring unit 20 The wireless signal monitored is parsed, and the SSID and BSSID of hotspot is therefrom obtained, by SSID, BSSID of the hot spot And the large capacity being connected with technical grade host equipment 10 is recorded in the information such as signal strength, working channel, time for monitoring Technical grade storage unit 40 in, and bettered a record at any time for tracking, all of the hotspot can be extracted when needed Relevant information, the legitimacy judging module 32 as hotspot determine whether the hotspot/radio reception device is illegal The reference frame of hot spot.

In addition, the utility model embodiment obtains the wireless device of connection hotspot by working channel (WIFI channel) Information, and keep the method that the wireless device is recorded and tracked.Monitoring modular 31 supervises hotspot monitoring unit 20 The wireless signal measured is parsed, and therefrom obtains the wireless device information of connection hotspot, by the MAC of the wireless device The technical grade for the large capacity being connected with technical grade host equipment 10 is recorded in the information such as location, the hot spot of connection, time for monitoring It in storage unit 40, and betters a record at any time, all relevant informations of the wireless device can be extracted when needed, as to this The foundation that wireless device is tracked.

The step 3 described in the utility model embodiment specifically: Communication Monitoring module 33 is to the wireless signal monitored It is parsed, therefrom obtains wireless telecommunications record, hotspot SSID, BSSID, the wireless connection of the wireless telecommunications will be participated in The information such as the MAC Address of equipment, communication data packet length, time for monitoring are recorded to be connected with technical grade host equipment 10 It in the technical grade storage unit 40 of large capacity, and betters a record at any time, all phases of the wireless telecommunications can be extracted when needed Information is closed, as the foundation being tracked to the wireless telecommunications.By these data records, in conjunction with the network communication of cable network Feature carries out network data exchange depth analysis, and identification current network whether there is illegal external connection risk, and send out in first time Illegal external connection is alarmed out, and administrative staff is notified to carry out related disposition.

In conclusion may be implemented by above-mentioned the utility model comprehensive to the wireless channel in industrial control system environment Monitoring, hotspot/wireless connectivity devices legitimacy are quickly screened, and issue alarm, early warning and notification message in first time, The effectively access of prevention illegal wireless hot spot prevents illegal external connection event caused by the illegal access due to hotspot and occurs, Industrial control system network is avoided to be connected on internet by intentional or unintentional, playing to industrial control system network actively has The safety protection function of effect.

Claims

1. a kind of hotspot monitoring device using single hotspot monitoring technology, which is characterized in that hotspot monitoring Device includes technical grade host equipment (10), hotspot monitoring unit (20), hotspot main control unit (30) and technical grade Storage unit (40)；The hotspot monitoring unit (20), hotspot main control unit (30) and technical grade storage unit (40) it is connected respectively with the technical grade host equipment (10)；Wherein, the hotspot main control unit (30) includes prison Module (31), legitimacy judging module (32) and Communication Monitoring module (33) are surveyed, the monitoring modular (31) and legitimacy are adjudicated Module (32) is connected, and the legitimacy judging module (32) is connected with the Communication Monitoring module (33).

2. the hotspot monitoring device according to claim 1 using single hotspot monitoring technology, which is characterized in that The hotspot main control unit (30) further includes the illegal access warning module connecting with the Communication Monitoring module (33) (34)。

3. the hotspot monitoring device according to claim 1 using single hotspot monitoring technology, which is characterized in that The hotspot monitoring unit (20) is connected by PCIe bus with the technical grade host equipment (10), and uninterrupted poll Wireless WIFI channel carries out the detection of hotspot, and the information detected is passed to hotspot by bus data interaction Main control unit (30).

4. the hotspot monitoring device according to claim 1 using single hotspot monitoring technology, which is characterized in that The wireless communication data of the Communication Monitoring module (33) passes to technical grade storage unit (40) guarantor by the interaction of SATA bus Record is deposited, while reading the data for being saved record for legitimacy judging module (32) progress from technical grade storage unit (40) Validity judgement and administrative staff, which have access to, checks relevant information.