JP7173679B2 - Training device for computer system - Google Patents

Description

The present application relates to a training device for a computer system.

As a conventional training and training device, a hypervisor having two modes, a normal operation mode for plant operation on computer hardware and a training mode for operation training, is provided, and conventional software is operated in the normal operation mode. Also, in a training mode, conventional software and training software are operated, and a data path is formed so as to obtain a response from the training software according to the operation of the conventional software (see, for example, Patent Document 1). .

JP 2017-215543 A

However, the technique disclosed in Patent Document 1 may be attacked by sending a packet disguised as a training mode in a system composed of a plurality of computers, causing the hypervisor to behave unexpectedly. In addition, there is a problem that there is a possibility that conventional software may be affected if the training is erroneous.

The present application discloses a technique for solving the above-described problems, in which training is camouflaged from the outside in a computer system that configures a dual system, without affecting slave software due to training. To provide a training device for a computer system which does not affect normal operation even if it is attacked by a computer system.

The training combined device for the computer system disclosed in the present application is
A training management device connected via a network, a master computer forming a first computer forming a duplex system, and a slave computer forming a second computer are provided,
The first computer and the second computer that receive packets sent by the plant equipment connected to the network and the training management device determine the system state of their own system,
The main computer that constitutes the first computer determined to be the main computer operates based on the normal software stored in the normal software unit when the training identification header is not added to the packet, and the training identification header is added, the packet is discarded,
When the training identification header is not added to the packet, the slave computer, which constitutes the second computer determined as the slave system, operates based on the normal software stored in the normal software unit and adds the training identification header to the packet. is added, it is determined whether or not it is in training mode, and if it is in training mode, it operates based on the normal software, and if it is not in training mode and there is a training start instruction, the normal software The unit operates based on training software created by cloning the normal software, and discards the packet if the training start instruction is absent.

Since the computer system training device disclosed in the present application employs the configuration described above, it does not adversely affect normal software during training, and can be protected from attacks disguised as training, and Training software is usually created by cloning software, which has the effect of eliminating opportunities for fraud.

2 is a block diagram showing a training device for the computer system according to Embodiment 1; FIG. FIG. 4 is a diagram showing an operational flow when receiving a packet according to the first embodiment; FIG. 4 is a diagram showing an operational flow when receiving a packet according to the first embodiment; FIG. 11 is a system diagram showing a training device for a computer system according to Embodiment 2;

Embodiment 1.
Embodiment 1 will be described based on the drawings. FIG. 1 is a block diagram showing a computer system training device 100 according to Embodiment 1, which is provided in, for example, a sewage treatment facility and constitutes a dual system for controlling plant operation. In the training combined use device 100 , a main computer 10 as a first computer, a slave computer 20 as a second computer, and a training management device 30 are connected via a network 40 . Plant equipment (not shown) is connected to the network 40 . The main system computer 10 is provided with a normal software unit 11 (hereinafter abbreviated as normal SW unit 11) that operates as a virtual machine in a normal operation mode. A unit 11A and a system state notification unit 11B for notifying the system state of itself are provided.

A hypervisor 13 is usually mounted in the lowest layer of the SW unit 11 . The hypervisor 13 controls operations during normal/training, and includes a normal/training mode management unit 13A for operating the plant in a normal mode and a normal/training mode for training, and the normal SW unit 11. A system state storage unit 13B that stores the state (master or slave), a clone creation unit 13C that creates a clone of a virtual machine (hereinafter abbreviated as VM), and an identification header that indicates a packet dedicated to training mode. A training packet header manager 13D is provided for this purpose. A training software section 12 (hereinafter abbreviated as training SW section 12) that operates in the training operation mode is also provided.

The slave computer 20 is provided with a normal SW unit 11, a hypervisor 13, and a training SW unit 12 similar to the main computer 10 described above. The training SW section 12 is not equipped with a training SW, and is centrally managed by the training management device 30 .

The cloning unit 13C provided in the hypervisor 13 clones the normal SW unit 11 to generate a training SW stored in the training SW unit 12. FIG. In this manner, the training SW operates in place of the normal SW of the normal SW section 11 in the training mode.

A training SW is installed in the training control SW section 14 of the training management device 30 . The training control SW unit 14 has a function of transmitting packets to the main computer 10 and the slave computer 20 based on training content and responding to packets received from the master computer 10 and the slave computer 20 . A training packet header adding section 14A is provided in the training control SW section 14 in order to always add a dedicated training identification header to packets used during training as will be described later.

Both the main computer 10 and the slave computer 20 are always in operation.

2 and 3 are diagrams showing the operation flow of the training device 100 according to the first embodiment when receiving a packet. FIGS. 2 and 3 show the operation flow in which the main computer 10 and the slave computer 20 are operated by the normal SW during plant operation, that is, the operation flow in the normal SW of ST1 to ST5 and ST7 in FIG. In order to implement plant operation control training for plant engineers, the operation flow when training is started based on the output from the training management device 30 by the secondary computer 20, that is, ST1, ST2, ST6 in FIG. 2 and ST8 in FIG. It also shows the operation flow in the training SW of ST14. Note that ST is an abbreviation for step.

ST1. The hypervisor 13 of the master computer 10 forming the first computer and the slave computer 20 forming the second computer receives a packet of data transmitted by the plant equipment or a training start packet transmitted by the training management device 30 via the network 40. receive.
ST2. The system state storage unit 13B of the hypervisor 13 of the first computer and the second computer normally determines whether the SW unit 11 is the own system or the slave system.
ST3. The training packet header management unit 13D checks whether or not a training identification header is added to the packet.
ST4. The normal/training mode management unit 13A determines that the packet is a normal packet, and the normal SW unit 11 performs plant operation control in the normal mode using the normal SW.

ST5. The training packet header management unit 13D determines that the packet is an unauthorized packet and discards the unauthorized packet.
ST6. The training packet header management unit 13D of the slave computer 20 checks whether or not a training identification header is added to the packet.
ST7. The normal/training mode management unit 13A determines that the packet is a normal packet, and the normal SW unit 11 of the slave computer 20 operates normally according to the stored normal SW.
ST8. The normal/training mode management unit 13A determines whether or not the current mode is the training mode.

ST9. The training packet header manager 13D removes the training identification header.
ST10. The training SW section 12 of the slave computer 20 that receives the output of the normal/training mode management section 13A operates in the training mode by the training SW.
ST11. The normal/training mode management unit 13A checks whether or not there is an instruction to start training in the header.

ST12. Based on the output of the clone creation unit 13C, the normal SW unit 11 of the slave computer 20 clones the normal SW in operation at the time of packet reception and transmits it to the training SW unit 12. FIG.
ST13. The slave computer 20 shifts to the training mode, and the training SW section 12 operates with the training SW created by the clone.
ST14. The normal/training mode management unit 13A determines that the packet is an unauthorized packet without an instruction to start training, and discards the unauthorized packet.

The operation of the hypervisor 13 at the time of packet transmission will be described. When the SW unit 11 normally transmits a packet to the training management device 30, the hypervisor 13 determines whether the computer is the master system or the slave system in the system state storage unit 13B. Send as is. In the case of the slave system, the normal/training mode management unit 13A continues to determine whether the packet is in the normal mode or the training mode. On the other hand, in the training mode, the training packet header management unit 13D adds a training identification header and transmits the packet with the training management device 30 as the destination.

Since the first embodiment has the configuration as described above, the main computer 10 and the slave computer 20 are not adversely affected by the normal SW due to training, and an attack disguised as training can be performed. can be protected. In addition, since it has a function of cloning the normal SW to create a training SW at the start of training, there is also an effect of eliminating the chance that the training SW will be fraudulent.

Embodiment 2.
In the second embodiment, a plurality of combinations of the main computer 10 and the slave computer 20 constituting the dual-system training and training apparatus 100 of the first embodiment are provided. Two sets of B systems are provided, and are configured in a closed relationship with the training management device 30 . By developing such relationships, it is possible to expand to a large-scale system composed of multiple computers without adding special measures.

While this application describes various exemplary embodiments and examples, various features, aspects, and functions described in one or more embodiments may not apply to particular embodiments. can be applied to the embodiments singly or in various combinations.
Therefore, countless modifications not illustrated are envisioned within the scope of the technology disclosed in the present application. For example, modification, addition or omission of at least one component, extraction of at least one component, and combination with components of other embodiments shall be included.

10 main system computer, 11 normal SW section, 11A system switching section, 12 training SW section,
13 hypervisor, 13A training mode management unit, 13B system state storage unit,
13C clone creation unit, 13D training packet header management unit, 14 training control SW unit,
14A training packet header addition unit, 20 slave computer, 30 training management device,
40 networks, 100 combined training devices.

Claims (3)

A training management device connected via a network, a master computer forming a first computer forming a duplex system, and a slave computer forming a second computer are provided,
The first computer and the second computer that receive packets sent by the plant equipment connected to the network and the training management device determine the system state of their own system,
The main computer that constitutes the first computer determined to be the main computer operates based on the normal software stored in the normal software unit when the training identification header is not added to the packet, and the training identification header is added, the packet is discarded,
When the training identification header is not added to the packet, the slave computer, which constitutes the second computer determined as the slave system, operates based on the normal software stored in the normal software unit and adds the training identification header to the packet. is added, it is determined whether or not it is in training mode, and if it is in training mode, it operates based on the normal software, and if it is not in training mode and there is a training start instruction, the normal software A combined training device for a computer system, wherein the unit operates based on training software created by cloning the normal software, and discards the packet when the training start instruction is absent. 2. The computer system according to claim 1, wherein said training identification header is added by a training packet header manager of a hypervisor provided in said main computer and said slave computer, and then transmitted to said training management device. Combined training device. 2. A plurality of combinations of said main computer forming said first computer forming said dual system and said slave computer forming said second computer are provided and connected to said network. 3. A training device for a computer system according to claim 2.

Images