CN211151986U

CN211151986U - Industrial control safety isolation system for secondary water supply supercharging equipment

Info

Publication number: CN211151986U
Application number: CN201921954463.6U
Authority: CN
Inventors: 赵权益; 袁令峰
Original assignee: Zhejiang Fulaide Environmental Equipment Co ltd
Current assignee: Zhejiang Fulaide Environmental Equipment Co ltd
Priority date: 2019-11-13
Filing date: 2019-11-13
Publication date: 2020-07-31
Anticipated expiration: 2029-11-13

Abstract

The utility model discloses an industrial control safety isolation system for secondary water supply supercharging equipment, a serial communication port, including programmable controller P L C, 232 change ethernet equipment, VPN communication network and secondary water supply dispatch center supervisory control computer, programmable controller P L in proper order with 232 change ethernet equipment, VPN communication network and secondary water supply dispatch center supervisory control computer are connected, 232 change ethernet equipment includes first link and second link, be equipped with first 2 cluster interfaces on the first link, first 3 cluster interfaces and first 5 cluster interfaces, the second link is equipped with second 2 cluster interfaces, second 3 cluster interfaces and second 5 cluster interfaces, first 2 cluster interfaces and second 3 cluster interfaces put through mutually, first 5 concatenate and second 5 cluster interfaces put through mutually, first 3 cluster interfaces do not put through with second 2 interface mutually, it can complete network isolation, data unidirectional transmission to secondary water supply dispatch center's equipment and software, effectively prevent invading water supply pumping station automation control system.

Description

Industrial control safety isolation system for secondary water supply supercharging equipment

Technical Field

The utility model relates to an application reaches secondary water supply dispatch center, especially an industrial control safety isolation system for secondary water supply supercharging equipment with data and alarm information safely with pressure boost working shaft station system.

Background

Industrial control systems were completely independent and isolated from enterprise management systems for the first decades of development. However, as the demand for the integration of management and control by enterprises in various industries increases, the industrial control system and the enterprise management information system gradually realize networking integration, and data exchange is realized between the management information network and the production control network, so that the industrial control system is not an independently operating system any more, and needs to be communicated and interconnected with the management system and even the internet.

In addition, the structure of the industrial control system is also developing towards the industrial ethernet structure, and the openness is getting stronger. In industrial control systems, a general-purpose PC server, a PC terminal, a general-purpose operating system, and a database are used in a large amount, and thus, the system is easily attacked by viruses, trojans, and hackers from a corporate network or the internet.

SUMMERY OF THE UTILITY MODEL

The utility model aims to solve the problem that a complete network isolation is provided, equipment and software that secondary water supply dispatch center are transmitted to data one-way effectively prevent hacker's invasion intelligent booster water supply pump station automation control system's an industrial control safety isolation system for secondary water supply supercharging device.

In order to achieve the above object, the utility model provides a technical scheme that above-mentioned technical problem adopted is, an industrial control safety isolation system for secondary water supply supercharging equipment, a serial communication port, change ethernet equipment, VPN communication network and secondary water supply dispatch center supervisory control computer including programmable controller P L C, 232, programmable controller P L in proper order with 32 change ethernet equipment, VPN communication network and secondary water supply dispatch center supervisory control computer and be connected, 232 change ethernet equipment and include first link and second link, be equipped with first 2 cluster interfaces, first 3 cluster interfaces and first 5 cluster interfaces on the first link, the second link is equipped with second 2 cluster interfaces, second 3 cluster interfaces and second 5 cluster interfaces, first 2 cluster interfaces concatenate the mouth with second 3 and put through, first 5 and second 5 cluster interfaces put through, first 3 cluster interfaces do not put through with second 2 cluster interfaces.

Compared with the prior art, the technical scheme of the utility model have following advantage:

the utility model provides an industrial control safety isolation system for secondary water supply supercharging equipment, it carries out the physics with secondary water supply control system and transmission network and keeps apart to will come out data security's transmission.

Drawings

Fig. 1 is a schematic diagram of the overall structure of an industrial control safety isolation system for a secondary water supply supercharging device according to an embodiment of the present invention;

in the figure, 1 is a programmable controller P L C, 2 is 232-switching Ethernet equipment, 3 is a VPN communication network, 4 is a secondary water supply dispatching center monitoring control computer, 5 is a first connecting end, and 6 is a second connecting end.

Detailed Description

The following detailed description of the embodiments of the present invention is provided with reference to the accompanying drawings and examples. The following examples are intended to illustrate the invention, but are not intended to limit the scope of the invention.

Examples

As shown in fig. 1, the industrial control safety isolation system for secondary water supply pressurization equipment provided in this embodiment includes a programmable controller P L C1, a 232-to-ethernet device 2, a VPN communication network 3, and a secondary water supply dispatching center supervisory control computer 4, where the programmable controller P L C is sequentially connected to the 232-to-ethernet device, the VPN communication network 3, and the secondary water supply dispatching center supervisory control computer 4, the 232-to-ethernet device includes a first connection end 5 and a second connection end 6, the first connection end 5 is provided with a first 2-string interface, a first 3-string interface, and a first 5-string interface, the second connection end 6 is provided with a second 2-string interface, a second 3-string interface, and a second 5-string interface, the first 2-string interface is connected to the second 3-string interface, the first 5-string interface is connected to the second 5-string interface, and the first 3-string interface is not connected to the second 2-string interface.

Because the existing automatic control system of the intelligent booster water supply pump station generally adopts a P L C or single chip microcomputer control system, the system generally provides an RS232 serial interface, 232 ports, generally two serial ports of a round head 8 pin and a D type 9 pin are frequently used in engineering, under certain conditions, a corresponding round head or D type 232 serial port needs to be manufactured, a common wiring method (three systems) of RS232C serial port communication is adopted, the three serial ports are respectively 2 RXD and 3 TXD, and 5 is logically arranged, firstly, serial port transmission data can be realized as long as a data receiving pin and a data transmitting pin are arranged, the receiving pin and the data transmitting pin of the same serial port are directly connected by a wire, two serial ports are connected or one serial port is connected with a plurality of serial ports, the receiving pin and the data transmitting pin of the same serial port are directly connected with a wire to the 9 pin serial port, namely, the wiring method is 2-3,3-2 and 5-5, and because the distance of the 232 serial port communication is too short to be unfavorable for the serial port transmission of the Ethernet, the 232-to-over-distance transmission equipment 2.

Here, we disconnect the P L C from the 232-switch ethernet device 23-2 line, so that the P L C end can only send data and cannot receive data, and achieve transmission isolation in the physical sense, the control system of the intelligent pressurized water supply device is a programmable controller P L C1, a control program and a data transmission program are installed in the P L C, and periodically transmit data transmitted by the scheduling center to the 232 interface, the programmable controller P L C1 connects the external interface to 232 and connects the 232-switch ethernet device 2 in the manner of the above figure, wherein the 3-2 line is disconnected, so that the programmable controller P L C1 can only transmit data to the 232-switch ethernet device 2, and cannot receive any data, and achieve real isolation of the network in the physical sense.

The 232-to-Ethernet equipment 2 is set to be in a TCP Client communication mode, the IP address, the gateway and the like of the 232-to-Ethernet equipment are set to realize network intercommunication with the secondary water supply dispatching center monitoring computer 4, and the IP address of the 232-to-Ethernet equipment 2TCP Server is the IP address of the secondary water supply dispatching center monitoring computer 4, so that the 1-programmable controller P L C1 can safely transmit data to the secondary water supply dispatching center monitoring computer 4 in a one-way mode, and any data and control command on the network cannot influence the programmable controller P L C1.

The industrial control safety isolation system for the secondary water supply pressurization equipment provided by the embodiment physically isolates the secondary water supply control system from a transmission network, and safely transmits data, and simultaneously has the following functions,

1) the system supports various P L C monitoring systems of secondary water supply equipment, and is suitable for P L C or single-chip microcomputers of different brands at home and abroad, such as Siemens, AB, Schneider, Taida and the like;

2) and the security rate reaches 100 percent through 24-hour attack test of main hacker software at home and abroad.

3) And the network layer can not realize two-way communication with the secondary water supply control system by various means, but the monitoring data can be safely displayed in the secondary water supply monitoring center in real time without interruption.

The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, a plurality of improvements and decorations can be made without departing from the technical principle of the present invention, and these improvements and decorations should also be regarded as the protection scope of the present invention.

Claims

1. The industrial control safety isolation system for the secondary water supply supercharging equipment is characterized by comprising a programmable controller P L C, 232-conversion Ethernet equipment, a VPN communication network and a secondary water supply dispatching center monitoring control computer, wherein the programmable controller P L is sequentially connected with the 232-conversion Ethernet equipment, the VPN communication network and the secondary water supply dispatching center monitoring control computer, the 232-conversion Ethernet equipment comprises a first connecting end and a second connecting end, the first connecting end is provided with a first 2-string interface, a first 3-string interface and a first 5-string interface, the second connecting end is provided with a second 2-string interface, a second 3-string interface and a second 5-string interface, the first 2-string interface is communicated with the second 3-string interface, the first 5-string interface is communicated with the second 5-string interface, and the first 3-string interface is not communicated with the second 2-string interface.