CN214627382U

CN214627382U - Industrial data transmission terminal

Info

Publication number: CN214627382U
Application number: CN202120741033.7U
Authority: CN
Inventors: 李文杰; 李建桦; 李啸莹
Original assignee: Ningbo Jubo Information Technology Co ltd
Current assignee: Ningbo Jubo Information Technology Co ltd
Priority date: 2021-04-13
Filing date: 2021-04-13
Publication date: 2021-11-05
Anticipated expiration: 2031-04-13

Abstract

The utility model relates to an industrial data transmission terminal, including the terminal body, the interface of setting at terminal body surface and the cryptographic module that has the key is saved, but cryptographic module and interface plug are connected, the terminal body is including setting up at the terminal body inside and contain the treater with the same key of cryptographic module, install the cryptographic module on the terminal body with the mode of external plug, appointed key is write in into through special configuration instrument to every external cryptographic module all can be independent, then write in this key in the treater that corresponds the terminal body again, make the key that contains in treater and the cryptographic module the same, just so guaranteed that the start authentication and the data acquisition of single terminal body and data control etc. transmission process all need follow cryptographic module and obtain only cryptographic key, and carry out the key proofreading. Therefore, the independent operation function of the encryption module is realized, the operation is simple and convenient, and the software operation safety in the data transmission terminal is improved.

Description

Industrial data transmission terminal

Technical Field

The utility model belongs to the technical field of industry internet of things technique and specifically relates to a data transmission terminal for industry is related to.

Background

The industry of the industrial internet of things has various data transmission terminals, DTUs for short, and the basic functions of the DTUs include data acquisition, data uploading and data issuing control. At present, the mainstream DTU data transmission mode is a transparent transmission mode, and the security of the transmission process is divided into two types: one type is DTU without encryption protection design in the data transmission process; the other type is a DTU with encryption protection function in the data transmission process, but the encryption key has universality, namely, a single key corresponds to a plurality of DTUs with the same model. Currently, a second type of DTU is commonly used in the market, but for this type of DTU, due to its universality, the software running in the DTU lacks security.

SUMMERY OF THE UTILITY MODEL

The utility model aims to solve the technical problem that an industrial data transmission terminal is provided with simple structure, convenient operation, and can improve software operation security.

The utility model provides a, an industrial data transmission terminal, including the terminal body, set up the interface and the storage at terminal body surface have the cryptographic module of key, but cryptographic module and interface plug are connected, and the terminal body is including setting up at the inside treater that contains the same key with cryptographic module of terminal body.

The utility model has the advantages that: the industrial data transmission terminal adopting the structure has the advantages that the encryption modules are installed on the terminal body in an external plugging mode, each external encryption module can independently write in an appointed secret key through the special configuration tool, then the secret key is written in the processor corresponding to the terminal body, so that the secret keys contained in the processor and the encryption modules are the same, the condition that only encryption keys are required to be obtained from the encryption modules in the transmission processes of power-on authentication, data acquisition, data control and the like of a single terminal body is guaranteed, namely, one terminal body corresponds to one encryption module matched with the terminal body, the data transmission terminal and the external encryption modules have one-to-one correspondence uniqueness, the independent operation function of the encryption modules is realized, simplicity and convenience are realized, and the software operation safety in the data transmission terminal is improved.

Preferably, the encryption module comprises an encryption chip, the type of the encryption chip is CK22AX, and the chip is small in size, convenient to package and high in cost performance.

Preferably, the encryption module further comprises an I2C bus (7) having one end connected to the interface and the other end connected to the encryption chip, and with this configuration, the encryption module of the data transmission terminal can pass through I²The C bus is connected to a computer, and the key is written in and read out through a special read-write configuration interface tool, so that the read-write function of encryption of the encryption module is completed, the operation is simple and convenient, and the software operation safety can be improved.

Preferably, the encryption mode of the encryption module adopts AES256 encryption, and the AES256 encryption is a symmetric encryption algorithm which can ensure the confidentiality of the message and make the encrypted content difficult to decipher.

Preferably, the terminal body further comprises a 4G antenna connected with the processor, and by adopting the structure, the 4G antenna is used for registering, logging and networking, and data interaction between the data transmission terminal and the platform server is realized through a network.

Preferably, the terminal body further comprises an RS485 communication module connected with the processor, and by adopting the structure, the RS485 module is used for data interaction with downstream multipoint equipment through an RS485 interface.

Preferably, the terminal body further comprises a power module connected with the processor, and by adopting the structure, the power module is used for providing a stable and reliable power supply for the whole hardware system.

Drawings

Fig. 1 is a schematic structural diagram of an industrial data transmission terminal according to the present invention;

fig. 2 is a schematic circuit diagram of an encryption module according to the present invention;

as shown in the figure: 1. a 4G antenna; 2. an RS485 communication module;3. an encryption module; 4. a processor; 5. a power supply module; 6. a terminal body; 7. i is²A bus C; 8. an interface; 9. and (5) encrypting the chip.

Detailed Description

The invention is further described below with reference to the accompanying drawings in combination with the embodiments so that those skilled in the art can implement the invention with reference to the description, and the scope of the invention is not limited to the embodiments.

It will be understood by those skilled in the art that in the present disclosure, the terms "longitudinal," "lateral," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," "outer," and the like are used in an orientation or positional relationship indicated in the drawings for ease of description and simplicity of description, and do not indicate or imply that the referenced device or element must have a particular orientation, be constructed and operated in a particular orientation, and thus, the above terms should not be construed as limiting the present invention.

The utility model relates to an industrial data transmission terminal, including terminal body 6, set up and have the cryptographic module 3 of key in the interface 8 storage of 6 surfaces of terminal body, but cryptographic module 3 and interface 8 plug are connected, and terminal body 6 is including setting up at terminal body 6 inside and contain the treater 4 with the same key of cryptographic module 3. The industrial data transmission terminal with the structure in fig. 1 has three advantages: the corresponding encryption module 3 externally arranged on each terminal body 6 can independently write in a specified key (namely, the external encryption module 3 can independently write in the specified key through a special encryption module 3 configuration tool from the terminal body 6), so that the independent operation function of the encryption module 3 is realized; the unique key in the external encryption module 3 is bound in the transmission processes of startup authentication, data acquisition, data control and the like of the data transmission terminal, so that the safety of software operation is improved; in the normal operation process of the data transmission terminal, if the encryption module 3 is manually pulled out or other encryption modules 3 are manually replaced, the data transmission terminal automatically stops operation, namely, the DTU terminal equipment can normally operate only by inserting the only corresponding external encryption module 3, so that the uniqueness of the DTU terminal equipment and the external encryption module 3 is ensured.

As shown in fig. 1, the cryptographic module 3 includes a cryptographic chip 9, and the model of the cryptographic chip 9 is CK22AX, and with this chip, the chip has a small volume, is convenient to package, and has a high cost performance.

As shown in FIG. 1, the encryption module 3 further includes an I having one end connected to the interface 8 and the other end connected to the encryption chip 9² C bus 7, by which the encryption module 3 of the data transmission terminal can pass through I²The C bus 7 is connected to a computer, and the key is written in and read out through a special read-write configuration interface tool, so that the read-write function of the encryption module 3 is completed, the operation is simple and convenient, and the software operation safety can be improved.

As shown in fig. 1, the encryption mode of the encryption module 3 adopts AES256 encryption, and the AES256 encryption is a symmetric encryption algorithm, which can ensure the confidentiality of the message and make the encrypted content difficult to decipher.

As shown in fig. 1, the terminal body 6 further includes a 4G antenna 1 connected to the processor 4, and with this structure, the 4G antenna 1 includes an antenna connection line and an external antenna extension line meeting impedance requirements, which are used for registering, logging in and networking, and implementing data interaction between the data transmission terminal and the platform server through a network.

As shown in fig. 1, the terminal body 6 further comprises an RS485 communication module 2 connected with the processor 4, and by adopting the structure, the RS485 module port comprises a special RS485 transceiver, an isolation chip assembly and an interface 8EMC protection circuit, and the function of the RS485 module port is to perform data interaction with downstream multipoint equipment through an RS485 interface 8.

As shown in fig. 1, the terminal body 6 further includes a power circuit connected to the processor 4, and with this structure, the power circuit includes a DC-DC voltage reduction unit, an LDO voltage stabilization unit, an EMC protection circuit, and an LED circuit. The function of the power supply is to provide stable and reliable power supply for the whole hardware system.

The utility model provides an industrial data transmission terminal's theory of operation does: 1. when the data transmission terminal is powered on, the system automatically performs startup authentication through the external plug-in encryption module 3, and the system normally operates after the authentication is passed; if the encryption module 3 is not inserted during power-on, the startup authentication fails, and the system stops starting; 2. when data are interacted between the RS485 communication module 2 and the processor 4 through a general protocol and when the processor 4 and the 4G antenna 1 are interacted through a private protocol, the interacted data are encrypted by AES256, and an encryption key is read from the encryption module 3; 3. when the data transmission terminal equipment normally operates, regularly detecting whether the external encryption module 3 is on line or not, if the external encryption module is off line, stopping the system, and if the external encryption module is on line, recovering the system; 4. the data transmission terminal and the external encryption module 3 have one-to-one correspondence uniqueness.

Claims

1. An industrial data transmission terminal, characterized in that: including terminal body (6), set up interface (8) and the encryption module (3) that have the storage key at terminal body (6) surface, but encryption module (3) and interface (8) plug are connected, and terminal body (6) are including setting up in terminal body (6) inside and contain treater (4) with the same key of encryption module (3).

2. An industrial data transmission terminal according to claim 1, characterized in that: the encryption module (3) comprises an encryption chip (9), and the type of the encryption chip (9) is CK22 AX.

3. An industrial data transmission terminal according to claim 2, characterized in that: the encryption module (3) also comprises an I with one end connected with the interface (8) and the other end connected with the encryption chip (9)²C bus (7).

4. An industrial data transmission terminal according to claim 2 or claim 3, characterized in that: the encryption mode of the encryption module (3) adopts AES256 encryption.

5. An industrial data transmission terminal according to claim 1, characterized in that: the terminal body (6) further comprises a 4G antenna (1) connected with the processor (4).

6. An industrial data transmission terminal according to claim 5, characterized in that: the terminal body (6) further comprises an RS485 communication module (2) connected with the processor (4).

7. An industrial data transmission terminal according to claim 6, characterized in that: the terminal body (6) further comprises a power module (5) connected with the processor (4).