KR101969203B1 - Factory Data Security Management Method by IoT-based Integrated Factory Management System - Google Patents

Abstract

A factory data security management method using an IoT-based factory integrated management system is provided. A method for managing factory data security according to an embodiment of the present invention includes the steps of selecting factory data that can be distributed according to a policy at a factory; And providing the selected factory data as image data.
Accordingly, the data that can be distributed according to the policy at the factory can be managed separately through the Factory Digital Image module, thereby minimizing damage even if data is lost or manipulated due to internal or external security attacks.

Description

FIELD OF THE INVENTION [0001] The present invention relates to a plant data security management method using a factory integrated management system based on IoT,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to technology related to the Internet of Things (IoT), and more particularly, to a factory data security method using an IoT-based factory integrated management apparatus.

The Smart Factory is a concept that optimizes the system by applying ICT (Information and Communications Technologies) to the manufacturing process.

Among them, Industrial Internet of Things (IIoT) is attracting attention as a technology that will play a central role in improvement of process operation. Application of industrial objects Internet technology can connect existing manufacturing machines and equipments to super connect network and can build optimized manufacturing production system.

More specifically, it is possible to collect and interpret enormous amounts of data throughout the process in real time through the Internet of things. In addition, each process can be improved based on the interpreted data. Through this process, it is possible to efficiently perform cost management and material management, to facilitate the production of customized products, and to improve predictability of market changes through analysis of big data.

However, in order to construct a superconnection network, it is necessary to achieve vertical and horizontal integration between factories constituted by different infrastructures.

For such integration, it is necessary to improve the connectivity of different equipment, machines, sensors, and systems supplied by various companies, and to unify and communicate operational information.

However, it is a reality that each manufacturer has difficulty in ensuring interoperability of each device by using different interfaces, platforms, and systems. In addition, interfaces, platforms, and the like are constantly being improved and changed, so log data that can be extracted from these devices is also constantly changing.

Therefore, each factory is proposing a smart integrated service model based on IIoT to ensure better interoperability.

However, the number of smart factories that have integrated IIoT technology into existing manufacturing plants has increased, and security threats have increased accordingly. Smart factories are installed based on IoT, big data, artificial intelligence, etc. Therefore, security incidents occurring in smart factories are likely to spread to society as a whole.

In Germany, where a smart factory actually developed, the control system was destroyed last year by a hacking attack on a blast furnace control system at a steel mill, which caused huge damage to the entire industry. At the time, hackers had taken control of the process control system after taking out login accounts using e-mails from low-security blast furnace officials.

Security problems at smart factories can be directly linked to business outcomes, such as shutting down factories, beyond simple data loss issues, so there is a need to consider smart factory security systems.

SUMMARY OF THE INVENTION The present invention has been conceived in order to solve the above problems, and it is an object of the present invention to provide a data processing system and a data processing method in which, in order to prevent a security accident occurring in a smart factory and protect important process data, So that only the data can be accessed from the outside.

It is another object of the present invention to provide a gateway which performs authentication and monitoring of an external user access and operates an agent capable of verifying abnormal connection and requests, And a method for providing such a method.

According to another aspect of the present invention, there is provided a method for managing factory data security, the method comprising: selecting factory data distributable by a factory in accordance with a policy; And providing the selected factory data as image data.

The providing step may limit data of externally accessible through the gateway among the factory data to the image data.

The gateway may monitor image data access and certain image data may allow access after user authentication.

Factory data provided as image data may be part of actual data.

A factory data security management method according to the present embodiment includes: receiving a factory-related order request; And verifying that the received order request is a normal order request.

A normal order can be an order that meets at least one of the workforce, equipment and scale of the factory.

Abnormal orders may include unusual repetitive orders.

According to another embodiment of the present invention, a factory data security management apparatus includes: devices for generating factory data; And a server for selecting factory data that can be distributed in accordance with the policy in the factory and providing the selected factory data as image data.

As described above, according to the embodiments of the present invention, the data that can be distributed according to the policy at the factory is managed separately through the Factory Digital Image module, thereby minimizing damage even if data is lost or manipulated by internal or external security attacks have.

According to the embodiments of the present invention, the upper application can prevent direct access to the equipment or the device of the factory, so that the operation of the equipment, the actuator, the controller, etc. affecting the operation of the plant is not affected.

In addition, according to embodiments of the present invention, the gateway strictly manages and monitors external users, and in the case of important information of the Factory Digital Image, the gateway manages data access through a user authentication process, thereby enhancing data security .

In addition, according to the embodiments of the present invention, each factory operates a Request Validation Agent in the MES / ERP system, thereby preventing the operation of the system from being continuously transmitted due to an abnormal attack by an insider attack case, Thereby preventing the problem of performing order production.

1 is a diagram showing an IoT-based factory integrated management system to which the present invention is applicable;
FIG. 2 is a block diagram more specifically illustrating one instance of the field area portion shown in FIG. 1;
3 is a diagram showing a configuration of a Factory Digital Image,
4 is a diagram illustrating an order request verification process through an MES.

Hereinafter, the present invention will be described in detail with reference to the drawings.

FIG. 1 is a diagram showing an IoT-based factory integrated management system to which the present invention is applicable. The factory integrated management system to which the present invention can be applied includes an edge tier 100, a platform tier 200, and an enterprise tier 300 ).

The field area unit 100 collects data from sensors, smart devices, programmable logic controllers (PLCs), distributed control systems (DCS), and various other servers installed in respective factories and transmits them to a gateway (SFW Gateway, Smart Factory Web Gateway To the platform area unit 200 via the interface unit 200. [

The field area unit 100 may include a plurality of instances each located on a factory basis. Here, the " instance " means a system installed in one factory to manage the one plant. Also, the field area unit 100 can create a new instance or remove an existing instance without restriction.

The platform area unit 200 is connected to the field area unit 100 to store and manage data related to each instance included in the field area unit 100. [ The platform area unit 200 may serve as a middleware that transmits and receives data to and from each instance through a gateway located in the field area unit 100.

At this time, the field area unit 100 and the platform area unit 200 can communicate with one M2M (One Machine to Machine) or OPC UA (OPC (Unified Object Linking and Embedding) have.

In the latter case, the platform area unit 200 serves as an OPC client according to the OPC UA standard.

The enterprise domain unit 300 is configured to provide a web-based service to a user through an API (Application Programming Interface) provided in the platform in connection with the platform domain unit 200.

The enterprise domain unit 300 may provide an MES (Manufacturing Execution System) or an ERP (Enterprise Resource Planning) service in addition to the web-based service. The MES or ERP service can be provided in each instance of the field area unit 100. However, it is possible to manage only the devices located in one instance with the management system in one instance located in the field area unit 100 . On the other hand, the MES or the ERP in the enterprise domain unit 300 can provide the service for the entire field area 100 based on the data collected from the platform data.

In addition, the enterprise domain unit 300 can provide various services through an application provided by an external provider.

The web-based service may include an analysis or visualization service based on data provided in the platform area unit 200. [

That is, the platform area unit 200 serves as a middleware layer for connection with the field area unit 100, and the enterprise area unit 300 includes an application layer 300 based on data collected in the platform area unit 200 It plays a role. Accordingly, the platform area 200 and the enterprise area 300 can be in the form of a middleware and an application layer included in one factory integrated management device (200 + 300).

2 is a block diagram more specifically showing one instance of the field area section 100 shown in FIG.

Each instance of the field region 100 includes devices 110 connected to one or more in-plant production equipment 150, such as a PLC, a DCS, a smart device, a sensor, and an actuator. Each of the devices 110 is provided with an OPC UA server module (not shown), and collects data from each of the devices 110 having different protocols to provide an OPC UA client module (not shown) The data can be transmitted to the server 120 or the model server 130.

Alternatively, an OPC UA interface module (not shown) for OPC UA-based communication is installed in each of the devices 110, and data of each device 110 is collected in one OPC UA server module (not shown) Data may be transmitted to the UA client module (not shown).

More specifically, in the case of PLC or DCS, log data generated in the process of controlling the lower smart device or the in-plant production equipment 150 is collected and transmitted to the field operation server 120 or the gateway 140.

The sensor may collect temperature sensing information collected from each production equipment 150 and transmit it to the field operation server 120 or the gateway 140. The smart device or the actuator may collect the collected contents according to the characteristics of each device, To the operational server 120 or the gateway 140. For example, if the smart device is a camera, it may transmit a photograph of the production equipment 150 to the field operating server 120 or the gateway 140.

The field operating server 120 is provided with an OPC UA client module (not shown), and can receive data collected from the OPC UA server module installed in each of the devices 110. The received data is managed through the OPC UA Aggregating Server.

The field operating server 120 may also include an API for providing MES or ERP services. The MES or ERP service provided through the field operation server 120 may provide only one instance of the field operation server 120, that is, a management service for one factory.

The model server 130 is a configuration for storing and managing information (equipment connection interfaces, connection structures, setting values, and the like) of devices and facilities constituting the factory in a script form. The script form can follow AutomationML (Automation Markup Language) format. The OPC UA server module may be installed in the model server 130 and may transmit the script type data to the field operating server 120 or the gateway 140.

The gateway 140 receives data from the various devices 110 including the OPC UA interface, the field operation server 120, and the model server 130, and transmits the data to the platform. The gateway 140 may perform data processing such as filtering and security level setting before sending the data of the field area 100 to the platform area 110.

The gateway 140 may include an OPC UA client module (not shown) and an OPC UA server module (not shown) since it can collect and transmit data by the OPC UA standard.

Each instance in the field region section 100 is configured in this manner, and the field region section 100 includes a plurality of instances.

Again, the configuration of the platform area unit 200 will be described with reference to FIG. As shown in FIG. 1, the platform area section 200 includes a hub (smart factory web hub) 210,

A Factory-Thing Device Management Module 220, a Factory-Thing Data Management and Analysis Module 230, a service interface module 240, an external interface module 250, ).

The hub 210 has a structure for connecting the field area unit 100 and the platform area unit 200 and transmits data of a plurality of instances included in the field area unit 100 through the hub 210 to a platform area unit I can do it.

This hub 210 may communicate with the gateway 140 of the field area 100 in accordance with the OPC UA standard. Since the hub 210 receives data from the gateway 140, the hub 210 includes an OPC UA client module.

The device management module 220 is a structure for managing connection with each device 110 existing in the field area 100. The device management module 220 provides basic device management functions such as creation, deletion, and inquiry of each device 110.

The data management module 230 stores the data received through the OPC UA server module and transmits the data to the enterprise area unit 300. That is, it performs overall management of the data collected through the OPC UA standard.

The service interface module 240 is an API for being connected to an arbitrary service application installed in the enterprise area unit 300 based on the data of the platform area unit 200. The service interface module 240 may provide an open API.

Service applications such as a web portal, MES, and ERP located in the enterprise domain unit 300 are created based on an open API provided in the service interface 300.

The external interface module 250 is an API for interworking with an external service other than the enterprise domain unit 300. The external interface module 250 may be connected to the cloud server and may be connected to the mashup content servers generated through the API provided by the external interface module 250.

1, the enterprise domain unit 300 may include a web application 310, an intelligent management module 320, and an external vendor application 330. As shown in FIG.

The web application 310 is a configuration for providing various services to a user through a smart factory web portal. The web application 310 provides visualized information based on the data of the platform area 200 at the time of the user's access.

For example, it may show the operational status of the production equipment 150 operating in each instance of the field area 100, such as the rotational speed of the conveyor belt, A notification of an abnormal occurrence of the production equipment 150 can be provided through a web portal.

The intelligent management module 320 includes an MES / ERP program and enables the existing MES / ERP service to be provided at an integrated level for a plurality of instances located in a plurality of factories.

The external provider application 330 means an application created by an external provider using the open API and data source provided in the platform area unit 200 and installed in the enterprise domain unit 300. The external provider application 330 may be in the form of an application service that is combined with the web application 310 or the intelligent management module 320 to further refine the web application 310 or the intelligent management module 320.

In the following, we propose three methods considering the characteristics of smart factory and IIoT technology in order to guarantee stable plant operation from various security incidents and to protect important process information.

(1) Operation and management of Factory Digital Image module

3 is a diagram showing a configuration of a Factory Digital Image. The Factory Digital Image takes a form of periodically receiving data from the OPC UA Aggregating Server 120 in the field area 100 and is mapped to a subset of the information model in the OPC UA Aggregating Server 120. The Factory Digital Image performs the mapping procedure through the mapping table to ensure interoperability when exchanging data with OPC Aggregating Server DB data.

Only the data that can be distributed according to the policy at the factory is transferred from the OPC UA aggregating server 120 to the Factory Digital Image, and for security, only the data can be accessed by the upper application. In addition, data with high security level is transferred to a parent application through a module for converting to a digital image file, thereby preventing direct database access.

The data values of the Factory Digital Image are generally updated in a long cycle as compared with the OPC UA Aggregating Server 120, the Model Server 130, and the PLC. The variable update period can be changed according to the service requirements.

(2) Restrict external access through SFW gateway

The SFW gateway 140 plays a major role in connecting each factory with the IIoT platform.

Due to security issues, the SFW gateway 140 only has access to data in the Factory Digital Image within the factory. This allows applications to block direct access to factory equipment or devices.

In addition, the SFW gateway 140 strictly manages and monitors the data of the Factory Digital Image when accessing the data from the outside, and manages the access to the data through the user authentication process in the case of important information of the Factory Digital Image.

The SFW gateway 140 has a data conversion function for syntax and semantic mapping to provide a consistent information model between the actual factory data model and the information model for the Smart Factory Web service.

(3) Abnormal request blocking through Agent in MES / ERP

Factory connected to SFW can check the production status and related information of other registered factories through the upper web application. And through the portal you can find the factory that best meets your needs and send a production order request.

In this case, the case of insider attack may send abnormal requests repeatedly / repeatedly to interfere with the operation of the system. This may cause the factory which received the abnormal request to perform erroneous order production, have.

To solve this problem, each factory operates a Request Validation Agent linked with the MES system so that it can automatically verify whether the order request transmitted from the web portal meets the capacity of the factory (manpower, equipment, size) . 4 is a diagram illustrating an order request verification process through an MES.

As a result, factory MES can smoothly control the production flow according to the order of verification and approval.

Up to now, preferred embodiments of a security support system and method considering the characteristics of smart factories and IIoT technology have been presented in order to guarantee stable operation of the plant from various security incidents and to protect important process information.

Specifically, in the embodiment of the present invention, data that can be distributed according to a policy at a factory is separately operated through a Factory Digital Image module, which is mapped and managed with an actual factory.

And, in the embodiment of the present invention, in the upper application, only the data in the Factory Digital Image can be accessed in the factory through the gateway having the bridge function of each factory. This allows applications to block direct access to factory equipment or devices.

Also, in the embodiment of the present invention, the gateway strictly manages and monitors the data of the Factory Digital Image when accessing from outside, and accesses the data through the user authentication process in the case of important information of the Factory Digital Image .

In addition, in the embodiment of the present invention, each factory operates a Request Validation Agent in the MES / ERP system, thereby causing an abnormal attack to be continuously transmitted to an insider attack case, Thereby preventing the problem of making production.

It goes without saying that the technical idea of the present invention can also be applied to a computer-readable recording medium having a computer program for performing the functions of the apparatus and method according to the present embodiment. In addition, the technical idea according to various embodiments of the present invention may be embodied in computer-readable code form recorded on a computer-readable recording medium. The computer-readable recording medium is any data storage device that can be read by a computer and can store data. For example, the computer-readable recording medium may be a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical disk, a hard disk drive, or the like. In addition, the computer readable code or program stored in the computer readable recording medium may be transmitted through a network connected between the computers.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the present invention.

110: Device
120: Field Operations Server (OPC UA Aggregating Server)
130: Model Server
140: SFW gateway
150: Production Equipment (Field Asset)

Claims (8)

The factory data providing system acquiring, as image data, factory data distributable in accordance with the policy at the factory;
Providing acquired image data;
Receiving a factory-related order request;
The factory data providing system verifying that the received order request is a normal order request,
In the providing step,
Limiting the data of the factory data accessible from the outside through the gateway to the image data,
Factory data to be provided as image data,
Factory data of some of the factory data,
In the receiving step,
Receives factory-related order requests from customers who have confirmed the production status of the factory and related information,
Normal orders,
It is an order matching the workforce, equipment and scale of the factory,
For abnormal orders,
Characterized in that abnormal repeated orders are included.
delete The method according to claim 1,
The gateway,
Wherein the image data access is monitored and the image data whose importance level is higher than the reference level allows access after user authentication.
delete delete delete delete Devices for generating factory data;
And a server for acquiring factory data distributable in accordance with the policy in the factory as image data, providing acquired image data, and verifying that the received order request is a normal order request upon receipt of a factory-related order request,
The server,
Limiting the data of the factory data accessible from the outside through the gateway to the image data,
Factory data to be provided as image data,
Factory data of some of the factory data,
The server,
Receives factory-related order requests from customers who have confirmed the production status of the factory and related information,
Normal orders,
It is an order matching the workforce, equipment and scale of the factory,
For abnormal orders,
Characterized in that an abnormal repeated order is included.

Images