KR20240062890A - Industrial internet of things server, and security setting method - Google Patents

Abstract

The present invention relates to a method for establishing security in monitoring and managing data flows processed in an Industrial Internet of Things (IIoT) environment.

Description

Industrial Internet of Things Server and security setting method {INDUSTRIAL INTERNET OF THINGS SERVER, AND SECURITY SETTING METHOD}

The present invention relates to a method for establishing security in monitoring and managing data flows processed in an Industrial Internet of Things (IIoT) environment.

The Internet is evolving from a human-centered network where humans create and consume information to an Internet of Things (IoT) network where information is exchanged and processed between distributed components such as objects.

In this Internet of Things environment, smart homes, smart buildings, smart cities, smart cars or connected cars, smart grids, health care, smart home appliances, and It can be applied to fields such as advanced medical services.

Recently, the Industrial Internet of Things (IIoT), which is a basic element of Industry 4.0 technology, is attracting attention as a lower-category concept than the Internet of Things.

The Industrial Internet of Things enables IoT technologies (connected machines, devices, sensors) to be leveraged in industrial applications and, when implemented in a modern ERP with artificial intelligence (AI) and machine learning capabilities, collects data from sensor nodes in the Industrial Internet of Things. By analyzing and utilizing available data, you can improve efficiency, productivity, and visibility.

Meanwhile, in order to improve the efficiency, reliability, and sustainability of these industrial Internet of Things technologies, not only data acquisition and processing, but also monitoring and management of data flows such as feature extraction and learning using data, as well as security that can support this. It is necessary to find a way to secure it.

The present invention was created in consideration of the above-mentioned circumstances, and the purpose to be achieved by the present invention is to ensure security in monitoring and managing data flows processed in an Industrial Internet of Things (IIoT) environment. .

The Industrial Internet of Things server according to an embodiment of the present invention for achieving the above object is connected by a wire according to the application of Node-RED to the Industrial Internet of Things (IIoT) system. When each node is defined, a setting unit that sets up a message broker that relays data transmission between nodes; and a generator that generates security information to support encrypted transmission when transmitting data between nodes using the message broker.

Specifically, the industrial Internet of Things system includes an edge industrial Internet of Things system (Edge IIoT system) that acquires data collected by a smart data acquisition device (SDAD) at the edge, The node may be defined to include the smart data collection device, which is a client node, and the industrial Internet of Things server, which is a server node, in the edge industrial Internet of Things system.

Specifically, the message broker may include a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through a local router in the Industrial Internet of Things system. .

Specifically, the Industrial Internet of Things system includes a centralized Industrial Internet of Things system (Centralized IIoT system) that exchanges data with the Edge IIoT system, and the node is connected to the Centralized Industrial Things system (Edge IIoT system). The Internet system may include the edge industrial Internet of Things system, which is a client node, and the industrial Internet of Things server, which is a server node.

Specifically, the message broker may include a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through the global Internet in the centralized Internet of Things system. there is.

Specifically, in relation to TLS (Transport Layer Security) support, when a CA (Certificate Authority) key and a CA certificate are generated, the generator encrypts the server authentication key generated for the server node with the CA authentication key and registers it as a signature. A server certificate and a client certificate registered as a signature can be generated by encrypting the client authentication key generated for the client node with the CA key.

Specifically, when the CA (Certificate Authority) key and CA certificate for application of Node-RED are generated, the generator encrypts the server authentication key generated for the server node with the CA key and registers it as a signature. A server certificate is generated, and the CA certificate can be manually installed as a root CA certificate on the Industrial Internet of Things server, which is a server node.

The security setting method performed on the Industrial Internet of Things server according to an embodiment of the present invention to achieve the above purpose is related to the application of Node-RED to the Industrial Internet of Things (IIoT) system. Accordingly, when each node connected by a wire is defined, a setting step of setting up a message broker that relays data transmission between nodes; And a generation step of generating security information to support encrypted transmission when transmitting data between nodes using the message broker.

Specifically, the industrial Internet of Things system includes an edge industrial Internet of Things system (Edge IIoT system) that acquires data collected by a smart data acquisition device (SDAD) at the edge, The node may be defined to include the smart data collection device, which is a client node, and the industrial Internet of Things server, which is a server node, in the edge industrial Internet of Things system.

Specifically, the message broker may include a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through a local router in the Industrial Internet of Things system. .

Specifically, the Industrial Internet of Things system includes a centralized Industrial Internet of Things system (Centralized IIoT system) that exchanges data with the Edge IIoT system, and the node is connected to the Centralized Industrial Things system (Edge IIoT system). The Internet system may include the edge industrial Internet of Things system, which is a client node, and the industrial Internet of Things server, which is a server node.

Specifically, the message broker may include a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through the global Internet in the centralized Internet of Things system. there is.

Specifically, in the generation step, in relation to TLS (Transport Layer Security) support, when a CA (Certificate Authority) key and a CA certificate are generated, the server authentication key generated for the server node is encrypted with the CA authentication key and converted into a signature. The registered server certificate and the client authentication key generated for the client node can be encrypted with the CA key to generate a registered client certificate as a signature.

Specifically, in the generation step, when the CA (Certificate Authority) key and CA certificate for application of Node-RED are generated, the server authentication key generated for the server node is encrypted with the CA key and converted into a signature. A registered server certificate is generated, and the CA certificate can be manually installed as a root CA certificate on the Industrial Internet of Things server, which is a server node.

Accordingly, in the Industrial Internet of Things server and security setting method of the present invention, Mosquitto Broker is used to monitor and manage data flow using Node-RED in an Industrial Internet of Things (IIoT) environment. )-based TLS support can be enabled to improve the efficiency, reliability, and sustainability of industrial Internet of Things technology by ensuring sufficient security.

1 is an exemplary diagram illustrating an industrial Internet of Things environment according to an embodiment of the present invention.
Figure 2 is an example diagram illustrating the application of Node-RED to an edge industrial Internet of Things system (Edge IIoT system) according to an embodiment of the present invention.
Figure 3 is an example diagram illustrating the application of Node-RED to a centralized industrial Internet of Things system (Centralized IIoT system) according to an embodiment of the present invention.
Figure 4 is a configuration diagram illustrating an industrial Internet of Things server according to an embodiment of the present invention.
Figures 5 and 6 are exemplary diagrams for explaining security information according to an embodiment of the present invention.
Figure 7 is a flowchart illustrating a security setting method according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the attached drawings.

In one embodiment of the present invention, Industrial Internet of Things (IIoT) technology is addressed.

The Internet is evolving from a human-centered network where humans create and consume information to an Internet of Things (IoT) network where information is exchanged and processed between distributed components such as objects.

In this Internet of Things environment, smart homes, smart buildings, smart cities, smart cars or connected cars, smart grids, health care, smart home appliances, and It can be applied to fields such as advanced medical services.

Recently, the Industrial Internet of Things (IIoT), which is a basic element of Industry 4.0 technology, is attracting attention as a lower-category concept than the Internet of Things.

The Industrial Internet of Things enables IoT technologies (connected machines, devices, sensors) to be leveraged in industrial applications and, when implemented in a modern ERP with artificial intelligence (AI) and machine learning capabilities, collects data from sensor nodes in the Industrial Internet of Things. By analyzing and utilizing available data, you can improve efficiency, productivity, and visibility.

Meanwhile, in order to improve the efficiency, reliability, and sustainability of these industrial Internet of Things technologies, not only data acquisition and processing, but also monitoring and management of data flows such as feature extraction and learning using data, as well as security that can support this. It is necessary to find a way to secure it.

Accordingly, in one embodiment of the present invention, we would like to propose a method to ensure security in monitoring and managing data flows processed in an industrial Internet of Things environment.

Figure 1 exemplarily shows an industrial Internet of Things environment according to an embodiment of the present invention.

As shown in FIG. 1, the industrial Internet of Things environment according to an embodiment of the present invention adopts cloud and edge computing technologies.

Accordingly, the industrial Internet of Things environment according to an embodiment of the present invention includes a smart data acquisition device (SDAD: 100) that collects measured data about home appliances, and an edge terminal. An edge industrial Internet of Things system (Edge IIoT system, 200) that acquires data collected by the smart data collection device 100, and a centralized industrial Internet of Things system (Centralized) that exchanges necessary data with the edge industrial Internet of Things system (200). It can be built in a form that includes an IIoT system, 300).

The smart data collection device 100 refers to a device that collects the voltage value measured through a voltage sensor and the current value measured through a current sensor as data, and uses an analog-to-digital converter (ADC). It may include a microprocessor unit (MCU)-based microprocessor unit (MCU) and an Internet of Things (IoT) module that supports MQTT (Message Queuing Telemetry Transport) protocol communication.

The edge industrial Internet of Things system 200 is capable of acquiring and processing data from the smart data collection device 100 of individual homes based on the execution of Edge AIoT, an AI model, as well as feature extraction and Edge AIoT learning using data. there is.

To this end, the edge industrial Internet of Things system 200 can be implemented as a local server, establishes wireless communication with the smart data collection device 100 of an individual home through a local router, and also establishes wireless communication with the smart data collection device 100 of an individual home through a local router. The Internet of Things system 300 supports MQTT-based HTTP data transmission through a Global Internet connection.

Here, the AI model that can be used in the edge industrial Internet of Things system 200 may further include Cloud AIoT learned in the centralized industrial Internet of Things system 300 as well as the Edge AIoT described above, which uses Cloud AIoT. During this time, data may be transmitted to the centralized industrial Internet of Things system 300 for learning of Cloud AIoT.

The centralized industrial Internet of Things system (300) is based on the execution of Cloud AIoT, an AI model, and exchanges and processes necessary data with the edge industrial Internet of Things system (200), and processes Cloud AIoT learning using feature extraction and data. You can.

Here, Cloud AIoT can be used in the edge industrial Internet of Things system 200 based on remote access.

To this end, the centralized industrial Internet of Things system 300 can be implemented as a cloud server, and as described above, MQTT-based communication with the edge industrial Internet of Things system 200 through a global Internet connection. Supports HTTP data transmission.

And, in the industrial Internet of Things environment according to an embodiment of the present invention, the data flow processed between the smart data collection device 100, the edge industrial Internet of Things system 200, and the centralized industrial Internet of Things system 300 is monitored. And as a technology for management, Node-RED technology is adopted.

Here, Node-RED is a visualization tool that expresses applications with nodes and wires. A node is an abstraction of an object or service, and the wire connecting a node can be understood as an abstraction of the flow of data. You can.

In this regard, Figure 2 exemplarily shows a state in which Node-RED is applied to the edge industrial Internet of Things system 200, and Figure 3 shows the node-RED to the centralized industrial Internet of Things system 300. It shows an example of the state in which Red (Node-RED) is applied.

Meanwhile, in the Industrial Internet of Things environment according to an embodiment of the present invention, public IP is used. Although this public IP has the advantage of system scalability, it has the disadvantage of being very weak in security, so the Industrial Internet of Things technology It can be a major obstacle to improving efficiency, reliability, and sustainability.

Accordingly, in one embodiment of the present invention, it is intended to secure security in monitoring and management of data flows processed in an industrial Internet of Things environment. Hereinafter, the configuration of an industrial Internet of Things server to realize this will be described in more detail. do.

Here, the industrial Internet of Things server refers to the local server constituting the edge industrial Internet of Things system 200 and the cloud server constituting the centralized industrial Internet of Things system 300. Hereinafter, for convenience of explanation, it is referred to separately. It is decided to assign an identification number (400).

Figure 4 shows the configuration of an industrial Internet of Things server 400 according to an embodiment of the present invention.

As shown in FIG. 4, the industrial Internet of Things server 400 according to an embodiment of the present invention may have a configuration including a setting unit 410 and a generating unit 420.

The entire configuration or at least part of the industrial Internet of Things server 400, including the setting unit 410 and the generating unit 420, is implemented in the form of a hardware module or a software module, or a combination of a hardware module and a software module. It can be implemented as:

Here, the software module can be understood as, for example, an instruction executed by a processor that controls operations within the industrial Internet of Things server 400, and these instructions are stored in the memory of the industrial Internet of Things server 400. You can have it.

Meanwhile, the industrial Internet of Things server 400 according to an embodiment of the present invention, in addition to the above-described configuration, further includes a communication unit (not shown), which is a communication module responsible for communication functions based on the MQTT (Message Queuing Telemetry Transport) protocol. It can be included.

The Industrial Internet of Things server 400 according to an embodiment of the present invention can secure sufficient security in monitoring and management of data flows processed in the Industrial Internet of Things environment through the above-described configuration. Hereinafter, this will be implemented. We will continue with a more detailed explanation of the configuration within the industrial Internet of Things server 400.

The setting unit 410 is responsible for setting up a message broker.

More specifically, when each node connected by a wire is defined according to the application of Node-RED, the setting unit 410 sets up a message broker that relays data transfer between nodes.

In this regard, the industrial Internet of Things system according to an embodiment of the present invention acquires data collected by the smart data collection device 100 at the edge, as described above with reference to FIG. 1. Includes an industrial Internet of Things system (200).

Accordingly, when applying Node-RED, the edge industrial Internet of Things system 200 is configured to include, for example, a smart data collection device 100, which is a client node, and an industrial Internet of Things server 400, which is a server node. can be defined.

In response, the setup unit 410 sends a Mosquitto Broker, which supports MQTT (Message Queuing Telemetry Transport)-based data transmission, to each node connected through a local router in the edge industrial Internet of Things system 200. It can be set as a broker.

Through this, in the edge industrial Internet of Things system 200 according to an embodiment of the present invention, the smart data collection device 100, which is a client node, and the industrial Internet of Things server 400, which is a server node, are relayed by Mosquitto Broker. Local MQTT-based HTTP data transmission can be performed between devices.

Additionally, the industrial Internet of Things system according to an embodiment of the present invention includes a centralized industrial Internet of Things system 300 that exchanges necessary data with the edge industrial Internet of Things system 200.

Accordingly, when applying Node-RED to the centralized industrial Internet of Things system 300, for example, the edge industrial Internet of Things system 200, which is a client node, and the industrial Internet of Things server 400, which is a server node, Nodes can be defined to contain

In response, the setup unit 410 sends a Mosquitto Broker, which supports MQTT (Message Queuing Telemetry Transport)-based data transmission, to each node connected through the global Internet in the edge industrial Internet of Things system 200. It can be set as a broker.

Through this, in the centralized industrial Internet of Things system 300 according to an embodiment of the present invention, the edge industrial Internet of Things system 200, which is a client node, and the industrial Internet of Things server, which is a server node, are relayed by Mosquitto Broker. 400), global MQTT-based HTTP data transmission can be performed between the two networks.

The generation unit 420 is responsible for generating security information.

More specifically, the generator 420 generates security information to support encrypted transmission when transmitting data between nodes using a message broker.

In this regard, Mosquitto Broker, which supports MQTT (Message Queuing Telemetry Transport)-based data transmission, supports TLS (Transport Layer Security).

Accordingly, the generation unit 420 includes security information to support TLS based on Mosquitto Broker, including a CA (Certificate Authority) key (Broker-CA.key) and a CA certificate (Broker-CA.crt), You can create a server authentication key (Broker-Server.key) and server certificate (Broker-Server.crt), and a client authentication key (Broker-Client.key) and client certificate (Broker-Client.crt).

To summarize this again, the generation unit 420 generates a CA key (Broker-CA.key) and a CA certificate (Broker-CA.crt) in relation to TLS support based on Mosquitto Broker, for example, as shown in FIG. 5. ) is created (Step-1), the server authentication key (Broker-Server.key) generated for the server node is encrypted with the CA key (Broker-CA.key) and the server certificate (Broker-Server.crt) is registered as a signature. ) is created (Step-2), and then the client authentication key (Broker-Client.key) generated for the client node is encrypted with the CA key (Broker-CA.key) and registered as a signature. crt) is being created (Step-3).

Meanwhile, in one embodiment of the present invention, it has been mentioned that Node-RED technology is adopted as a technology for monitoring and managing data flow processed in the industrial Internet of Things system.

For this purpose, while a Node-RED editor is installed in the industrial Internet of Things server 400, security is not set in this Node-RED editor.

Accordingly, the generator 420 contains security information for applying Node-RED, including a CA (Certificate Authority) key (Node-CA.key), a CA certificate (Node-CA.crt), and server authentication. You can create a key (Node-Server.key) and server certificate (Node-Server.crt).

To summarize this again, the generation unit 420 generates a CA key (Node-CA.key) and a CA certificate (Node-CA) in relation to security settings for the Node-RED editor, as shown in FIG. 6, for example. When .crt) is created (Step-1), the server authentication key (Node-Server.key) generated for the server node is encrypted with the CA key (Node-CA.key) and the server certificate (Node-Server.key) registered as a signature .crt) (Step-2).

Meanwhile, in the case of the Industrial Internet of Things system according to an embodiment of the present invention, security settings for the Node-RED editor are not fundamentally supported, so the CA certificate (Node) generated (issued) by the system -CA.crt) is not installed automatically.

Accordingly, the generator 420 encrypts the server authentication key (Node-Server.key) generated for the server node with the CA key (Node-CA.key) and creates a server certificate (Node-Server.crt) registered as a signature. Once created (Step-2), data is transferred between nodes by manually installing the CA certificate (Node-Server.crt) as the root CA certificate on the industrial Internet of Things server 400, which is a server node (Step-3). Enables the validity of the CA certificate (Node-Server.crt) to be verified.

As discussed above, according to the configuration of the Industrial Internet of Things server 400 according to an embodiment of the present invention, data is collected using Node-RED in an Industrial Internet of Things (IIoT) environment. By enabling Mosquitto Broker-based TLS support in monitoring and managing flows, the efficiency, reliability, and sustainability of industrial Internet of Things technology can be improved by ensuring sufficient security.

Hereinafter, a security setting method according to an embodiment of the present invention will be described with reference to FIG. 7.

The explanation will be continued on the assumption that the subject of operation of the security setting method according to an embodiment of the present invention is the industrial Internet of Things server 400 previously described with reference to FIG. 4.

First, the industrial Internet of Things server 400 sets up a message broker that relays data transmission between nodes when each node connected by a wire is defined according to the application of Node-RED (S110).

In this regard, the industrial Internet of Things system according to an embodiment of the present invention acquires data collected by the smart data collection device 100 at the edge, as described above with reference to FIG. 1. Includes an industrial Internet of Things system (200).

Accordingly, when applying Node-RED, the edge industrial Internet of Things system 200 is configured to include, for example, a smart data collection device 100, which is a client node, and an industrial Internet of Things server 400, which is a server node. can be defined.

In response, the industrial Internet of Things server 400 uses a Mosquitto broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through a local router in the edge industrial Internet of Things system 200. can be set as a message broker.

Through this, in the edge industrial Internet of Things system 200 according to an embodiment of the present invention, the smart data collection device 100, which is a client node, and the industrial Internet of Things server 400, which is a server node, are relayed by Mosquitto Broker. Local MQTT-based HTTP data transmission can be performed between the two.

Additionally, the industrial Internet of Things system according to an embodiment of the present invention includes a centralized industrial Internet of Things system 300 that exchanges necessary data with the edge industrial Internet of Things system 200.

Accordingly, when applying Node-RED to the centralized industrial Internet of Things system 300, for example, the edge industrial Internet of Things system 200, which is a client node, and the industrial Internet of Things server 400, which is a server node, Nodes can be defined to contain

In response, the industrial Internet of Things server 400 uses a Mosquitto broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through the global Internet in the edge industrial Internet of Things system 200. can be set as a message broker.

Through this, in the centralized industrial Internet of Things system 300 according to an embodiment of the present invention, the edge industrial Internet of Things system 200, which is a client node, and the industrial Internet of Things server, which is a server node, are relayed by Mosquitto Broker. 400), global MQTT-based HTTP data transmission can be performed between the two networks.

Furthermore, the Industrial Internet of Things server 400 generates security information to support encrypted transmission when transmitting data between nodes using a message broker.

In this regard, Mosquitto Broker, which supports MQTT (Message Queuing Telemetry Transport)-based data transmission, supports TLS (Transport Layer Security).

Accordingly, the industrial Internet of Things server 400 contains security information to support TLS based on Mosquitto Broker, including a CA (Certificate Authority) key (Broker-CA.key) and a CA certificate (Broker-CA.crt). ), server authentication key (Broker-Server.key) and server certificate (Broker-Server.crt), and client authentication key (Broker-Client.key) and client certificate (Broker-Client.crt).

In summary, the Industrial Internet of Things server 400 is a server node when a CA key (Broker-CA.key) and a CA certificate (Broker-CA.crt) are generated in relation to TLS support based on Mosquitto Broker. The server authentication key (Broker-Server.key) generated for the server is encrypted with the CA key (Broker-CA.key) to generate a server certificate (Broker-Server.crt) registered as a signature, and then generated for the client node. Encrypt the client authentication key (Broker-Client.key) with the CA key (Broker-CA.key) and generate a client certificate (Broker-Client.crt) registered as a signature (S120-S140).

Meanwhile, in one embodiment of the present invention, it has been mentioned that Node-RED technology is adopted as a technology for monitoring and managing data flow processed in the industrial Internet of Things system.

For this purpose, while a Node-RED editor is installed in the industrial Internet of Things server 400, security is not set in this Node-RED editor.

In this regard, the Industrial Internet of Things server 400 includes security information for Node-RED application, such as a CA (Certificate Authority) key (Node-CA.key) and a CA certificate (Node-CA.crt), You can also create a server authentication key (Node-Server.key) and a server certificate (Node-Server.crt).

In summary, the Industrial Internet of Things server 400 generates a CA key (Node-CA.key) and a CA certificate (Node-CA.crt) in relation to the security settings for the Node-RED editor, The server authentication key (Node-Server.key) generated for the server node is encrypted with the CA key (Node-CA.key) to generate a server certificate (Node-Server.crt) registered as a signature (S150-S160).

Meanwhile, in the case of the Industrial Internet of Things system according to an embodiment of the present invention, security settings for the Node-RED editor are not fundamentally supported, so the CA certificate (Node) generated (issued) by the system -CA.crt) is not installed automatically.

Accordingly, the industrial Internet of Things server 400 encrypts the server authentication key (Node-Server.key) with the CA key (Node-CA.key) through the previous step S160 and creates a server certificate (Node-Server.crt) registered as a signature. Once created, the CA certificate (Node-Server.crt) is then manually installed as the root CA certificate on the Industrial Internet of Things server 400, which is a server node, so that the CA certificate (Node-Server.crt) is used when transmitting data between nodes. So that the validity can be verified (S170).

As discussed above, according to the security setting method according to an embodiment of the present invention, data flow is monitored and managed using Node-RED in an Industrial Internet of Things (IIoT) environment. By enabling TLS support based on Mosquitto Broker, the efficiency, reliability, and sustainability of industrial Internet of Things technology can be improved by ensuring sufficient security.

Meanwhile, implementations of the functional operations and topics described in this specification are implemented as digital electronic circuits, computer software, firmware, or hardware including the structure disclosed in this specification and its structural equivalents, or one or more of these. It can be implemented by combining. Implementations of the subject matter described herein may comprise one or more computer program products, that is, one or more modules of computer program instructions encoded on a tangible program storage medium for processing or execution by the operation of a processing system. It can be implemented.

The computer-readable medium may be a machine-readable storage device, a machine-readable storage substrate, a memory device, or a combination of one or more of these.

In this specification, “system” or “device” includes all instruments, devices, and machines for processing data, including, for example, programmable processors, computers, or multiple processors or computers. In addition to the hardware, the processing system may include code that forms an execution environment for computer programs on demand, such as code making up processor firmware, a protocol stack, a database management system, an operating system, or a combination of one or more of these. .

A computer program (also known as a program, software, software application, script, or code) may be written in any form of a programming language, including compiled, interpreted, a priori, or procedural languages, and may be a stand-alone program or module. It can be deployed in any form, including components, subroutines, or other units suitable for use in a computer environment. Computer programs do not necessarily correspond to files in a file system. A program may be stored within a single file that serves the requested program, or within multiple interacting files (e.g., files storing one or more modules, subprograms, or portions of code), or as part of a file that holds other programs or data. (e.g., one or more scripts stored within a markup language document). The computer program may be deployed to run on a single computer or multiple computers located at one site or distributed across multiple sites and interconnected by a communications network.

Meanwhile, computer-readable media suitable for storing computer program instructions and data include semiconductor memory devices such as EPROM, EEPROM, and flash memory devices, magnetic disks such as internal hard disks and external disks, magneto-optical disks, and CDs. -Can include all forms of non-volatile memory, media, and memory devices, including ROM and DVD-ROM disks. The processor and memory may be supplemented by, or integrated into, special-purpose logic circuitry.

Implementations of the subject matter described herein may include backend components, such as a data server, middleware components, such as an application server, or, for example, a web browser or graphical user through which a user may interact with an implementation of the subject matter described herein. It may be implemented in a front-end component, such as a client computer with an interface, or in a computing system that includes any combination of one or more of such back-end, middleware, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication, such as a telecommunications network.

Although this specification contains details of numerous specific implementations, these should not be construed as limitations on the scope of any invention or what may be claimed, but rather as descriptions of features that may be unique to particular embodiments of particular inventions. It must be understood. Likewise, certain features described herein in the context of individual embodiments may also be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination. Furthermore, although features may be described as operating in a particular combination and initially claimed as such, one or more features from a claimed combination may in some cases be excluded from that combination, and the claimed combination may be a sub-combination. It can be changed to a variant of a sub-combination.

Additionally, although operations are depicted in the drawings in a specific order in this specification, this should not be understood to mean that such operations must be performed in the specific order or sequential order shown or that all illustrated operations must be performed to obtain desirable results. Can not be done. In certain cases, multitasking and parallel processing may be advantageous. Additionally, the separation of various system components in the above-described embodiments should not be construed as requiring such separation in all embodiments, and the described program components and systems may generally be integrated together into a single software product or packaged into multiple software products. You must understand that you can

As such, this specification is not intended to limit the invention to the specific terms presented. Accordingly, although the present invention has been described in detail with reference to the above-described examples, those skilled in the art may make modifications, changes, and variations to the examples without departing from the scope of the present invention. The scope of the present invention is indicated by the claims described below rather than the detailed description above, and all changes or modified forms derived from the meaning and scope of the claims and their equivalent concepts should be interpreted as being included in the scope of the present invention. do.

According to the industrial Internet of Things server and security setting method according to the present invention, it proposes a filtering method that can guarantee the reliability of energy data collected from home appliances, thereby exceeding the limitations of existing technology It is an invention that has industrial applicability because it not only has the potential for commercialization or sales of the applied device, but also the use of technology, and is clearly feasible in reality.

100: Smart data collection device
200: Edge industrial Internet of Things system
300: Centralized industrial Internet of Things system
400: Industrial Internet of Things server
410: Setting unit 420: Generation unit

Claims (16)

According to the application of Node-RED to the Industrial Internet of Things (IIoT) system, when each node connected by a wire is defined, a configuration unit that sets up a message broker that relays data transfer between nodes ; and
An industrial Internet of Things server comprising a generator that generates security information to support encrypted transmission when transmitting data between nodes using the message broker. According to claim 1,
The industrial Internet of Things system is,
It includes an edge industrial Internet of Things system (Edge IIoT system) that acquires data collected by a smart data acquisition device (SDAD) at the edge,
The node is,
An industrial Internet of Things server, characterized in that it is defined to include the smart data collection device as a client node in the edge industrial Internet of Things system, and the industrial Internet of Things server as a server node. According to claim 2,
The message broker is,
In the Industrial Internet of Things system, an Industrial Internet of Things server comprising a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through a local router. According to claim 2,
The industrial Internet of Things system is,
It includes a centralized IIoT system that exchanges data with the Edge IIoT system,
The node is,
An industrial Internet of Things server comprising the edge industrial Internet of Things system, which is a client node in the centralized industrial Internet of Things system, and the industrial Internet of Things server, which is a server node. According to claim 4,
The message broker is,
In the centralized Internet of Things system, an industrial Internet of Things server comprising a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through the global Internet. According to claim 1,
The generating unit,
In relation to TLS (Transport Layer Security) support, when a CA (Certificate Authority) key and a CA certificate are generated, the server authentication key generated for the server node is encrypted with the CA authentication key, the server certificate registered as a signature, and the client node are An industrial Internet of Things server characterized in that the client authentication key generated for the purpose is encrypted with the CA key and each client certificate is registered as a signature. According to claim 1,
The generating unit,
When the CA (Certificate Authority) key and CA certificate for application of Node-RED are generated, the server authentication key generated for the server node is encrypted with the CA key to generate a server certificate registered as a signature, and the server certificate is encrypted with the CA key. An industrial Internet of things server, characterized in that the CA certificate is manually installed as a root CA certificate on the industrial Internet of things server, which is a node. The security setting method performed on the Industrial Internet of Things server is:
According to the application of Node-RED to the Industrial Internet of Things (IIoT) system, once each node connected by a wire is defined, a setup step to set up a message broker that relays data transfer between nodes ; and
A security setting method comprising a generation step of generating security information to support encrypted transmission when transmitting data between nodes using the message broker. According to claim 8,
The industrial Internet of Things system is,
It includes an edge industrial Internet of Things system (Edge IIoT system) that acquires data collected by a smart data acquisition device (SDAD) at the edge,
The node is,
A security setting method characterized in that it is defined to include the smart data collection device as a client node in the edge industrial Internet of Things system, and the industrial Internet of Things server as a server node. According to clause 9,
The message broker is,
In the Industrial Internet of Things system, a security setting method comprising a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through a local router. According to clause 9,
The industrial Internet of Things system is,
It includes a centralized IIoT system that exchanges data with the Edge IIoT system,
The node is,
A security setting method comprising the edge industrial Internet of Things system as a client node in the centralized industrial Internet of Things system, and the industrial Internet of Things server as a server node. According to claim 11,
The message broker is,
In the centralized Internet of Things system, a security setting method comprising a Mosquitto Broker that supports MQTT (Message Queuing Telemetry Transport)-based data transmission for each node connected through the global Internet. According to claim 8,
The creation step is,
In relation to TLS (Transport Layer Security) support, when a CA (Certificate Authority) key and a CA certificate are generated, the server authentication key generated for the server node is encrypted with the CA authentication key, the server certificate registered as a signature, and the client node are A security setting method characterized by encrypting the client authentication key generated for this purpose with the CA key and generating each client certificate registered as a signature. According to claim 8,
The creation step is,
When the CA (Certificate Authority) key and CA certificate for application of Node-RED are generated, the server authentication key generated for the server node is encrypted with the CA key to generate a server certificate registered as a signature, and the server certificate is encrypted with the CA key. A security setting method characterized by manually installing the CA certificate as a root CA certificate on the Industrial Internet of Things server, which is a node. A computer-readable recording medium recording a program for executing the method of any one of claims 8 to 14. A computer program combined with hardware and stored on a medium for executing the method of any one of claims 8 to 14.