CN115599789A - Industrial control baseline auditing method and system - Google Patents
Industrial control baseline auditing method and system Download PDFInfo
- Publication number
- CN115599789A CN115599789A CN202211392354.6A CN202211392354A CN115599789A CN 115599789 A CN115599789 A CN 115599789A CN 202211392354 A CN202211392354 A CN 202211392354A CN 115599789 A CN115599789 A CN 115599789A
- Authority
- CN
- China
- Prior art keywords
- baseline
- change
- configuration data
- data
- current configuration
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
- G06F16/2228—Indexing structures
- G06F16/2246—Trees, e.g. B+trees
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
- G06F16/2457—Query processing with adaptation to user needs
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Computational Linguistics (AREA)
- Testing And Monitoring For Control Systems (AREA)
Abstract
Description
技术领域technical field
本发明涉及数据管理的技术领域,尤其涉及工业控制系统中控制系统数据管理技术领域,具体为一种工业控制基线审计方法及系统。The present invention relates to the technical field of data management, in particular to the technical field of control system data management in industrial control systems, specifically an industrial control baseline audit method and system.
背景技术Background technique
随着工业规模的扩大,控制系统数据的复杂化,传统的控制系统数据仅靠少数专业实施人员维护,专业人才培训困难,致使时间成本、物料成本、人力成本增加,产业效能陷入瓶颈,规模扩张受到限制。同时工程实施人员在实施过程中可能无法知晓自己或他人上次的操作,也无法得知对应操作的控制系统数据变更,更无法得知时间轴上所有控制系统数据变更,这将会导致控制系统数据管理上的混乱,并引发未知的隐患。With the expansion of industrial scale and the complexity of control system data, traditional control system data is only maintained by a small number of professional implementation personnel, and it is difficult to train professionals, resulting in increased time costs, material costs, and labor costs. Industrial efficiency has fallen into a bottleneck and scale expansion restricted. At the same time, the project implementers may not be able to know the last operation of themselves or others during the implementation process, nor can they know the control system data changes corresponding to the operations, let alone all the control system data changes on the time axis, which will cause the control system Data management confusion, and lead to unknown hidden dangers.
例如:实施人员将控制系统数据修改发布后发现不符合预期,但无法得知该操作导致的控制系统数据变更,导致修正至预期十分困难。再例如:实施人员A操作发布后,而实施人员B并不知道A的操作,两者任务如果存在一定冲突,则必然会造成数据的紊乱。For example: after the implementer modified and released the control system data, he found that it did not meet expectations, but he could not know the change of control system data caused by this operation, which made it very difficult to correct it to the expectation. Another example: after the operation of the implementer A is released, but the implementer B does not know the operation of A, if there is a certain conflict between the tasks of the two, it will inevitably cause data disorder.
发明内容Contents of the invention
针对上述问题,本发明的目的在于提供一种工业控制基线审计方法及系统,能够读取控制系统数据并记录存在变更的基线,提供历史审计记录详情的查看,并支持任意基线的比对,做到对控制系统数据的基线与审计管理。In view of the above problems, the purpose of the present invention is to provide an industrial control baseline audit method and system, which can read the control system data and record the changed baseline, provide a view of the details of the historical audit records, and support the comparison of any baseline. to baseline and audit management of control system data.
本发明的上述发明目的是通过以下技术方案得以实现的:Above-mentioned purpose of the invention of the present invention is achieved through the following technical solutions:
一种工业控制基线审计方法,包括以下步骤:An industrial control baseline audit method, comprising the following steps:
S1:对当前组态数据的变更进行检测,当检测到所述当前组态数据变更后,生成所述当前组态数据的基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到工业控制系统的基线库中;S1: Detect the change of the current configuration data. When the change of the current configuration data is detected, generate the baseline of the current configuration data, collect the current configuration data and store it in the baseline, and store the current configuration data in the baseline. The baseline is added to a baseline library of the industrial control system;
S2:对历史组态数据的变更进行审计,获取所述基线库中需进行比对的两条所述基线,对两条所述基线中存储的所述历史组态数据进行比对,并展示比对结果。S2: Audit the changes of historical configuration data, obtain the two baselines that need to be compared in the baseline library, compare the historical configuration data stored in the two baselines, and display Compare the results.
进一步地,步骤S1,具体为:Further, step S1 is specifically:
S11:检测实施人员的数据采集操作,当检测到所述数据采集操作之后,将所述当前组态数据存储为临时版本数据;S11: Detect the data collection operation of the implementer, and store the current configuration data as temporary version data after the data collection operation is detected;
S12:获取所述基线库中最后一条所述基线,根据预先配置的变更条目将所述临时版本数据与最后一条所述基线进行比对;S12: Obtain the last baseline in the baseline library, and compare the temporary version data with the last baseline according to the pre-configured change entries;
S13:当所述临时版本数据与最后一条所述基线的比对结果存在数据变更时,生成所述当前组态数据的所述基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到所述工业控制系统的所述基线库中,否则放弃所述临时版本数据,不生成所述当前组态数据的所述基线;S13: When there is a data change in the comparison result between the temporary version data and the last baseline, generate the baseline of the current configuration data, collect the current configuration data and store it in the baseline, adding the baseline to the baseline library of the industrial control system, otherwise discarding the temporary version data and not generating the baseline of the current configuration data;
S14:在所述工业控制系统操作过程中,重复步骤S11-S13,为所述基线库增加所述基线。S14: During the operation of the industrial control system, repeat steps S11-S13 to add the baseline to the baseline database.
进一步地,所述基线库中的所述基线具有时间轴按照时间排序,无继承关系,新的所述基线按照时间顺序在所述基线库中新增。Further, the baselines in the baseline library have a time axis sorted by time without inheritance relationship, and new baselines are added in the baseline library in time order.
进一步地,在步骤S1中,还包括:Further, in step S1, it also includes:
根据所述基线库中的数据存储规则,对采集的所述当前组态数据进行数据分类与整合,分类与整合后将与所述基线库中所述数据存储规则相匹配的所述当前组态数据存储到所述基线中,将所述基线增加到所述工业控制系统的所述基线库中。According to the data storage rules in the baseline library, perform data classification and integration on the collected current configuration data, and after classification and integration, the current configuration that matches the data storage rules in the baseline library Data is stored into the baseline, and the baseline is added to the baseline library of the industrial control system.
进一步地,所述基线库中的所述数据存储规将组态数据划分为五类:Further, the data storage specification in the baseline library divides the configuration data into five categories:
位号:包括模入AI、模出AO、开入DI、开出DO、自定义模拟量NA、自定义开关量ND、自定义整型量NN、页间交换模拟量PA、页间交换开关量PD、页间交换整型量PN在内的所述位号,并在确定对象关系属性时,将所述位号作为对象,将包括位号描述在内的自身可变属性作为所述位号的变更条目;Bit number: including module input AI, module output AO, input DI, output DO, custom analog NA, custom switch ND, custom integer NN, page-to-page exchange analog quantity PA, page-to-page exchange switch Quantity PD, the inter-page exchange integer quantity PN including the bit number, and when determining the object relationship attribute, use the bit number as the object, and use the self-variable attribute including the bit number description as the bit number No. change entry;
功能块:包括ASH高选功能块、MANUAL手操器功能块在内的所述功能块,并在确定对象关系属性时,将所述功能块作为对象,将包括功能块类型在内的自身可变属性作为所述功能块的变更条目;Function block: the function block including the ASH high-selection function block and the MANUAL hand-operated function block, and when determining the object relationship attribute, use the function block as an object, and use the function block itself including the function block type Change attributes as the change entry of the function block;
程序逻辑:包括功能框图FBD、梯形图LD、顺序功能图SFC在内的所述程序逻辑,所述逻辑程序内部包含所述功能块与所述位号的接线关系,并在确定对象关系属性时,将程序作为对象,并向下展开为功能块引脚和位号块引脚对象,以所述功能块引脚和所述位号块引脚对象的自身可变属性作为变更条目;Program logic: the program logic including function block diagram FBD, ladder diagram LD, and sequential function chart SFC. The logic program contains the wiring relationship between the function block and the bit number, and when determining the object relationship attribute , taking the program as an object, and expanding it downwards into function block pins and tag block pin objects, using the variable attributes of the function block pins and the tag block pin objects as change items;
流程图:包括监控组态中的一般流程图和弹出式流程图,并在确定对象关系属性时,将所述流程图作为对象,并向下展开为图形对象和动态,以对象的自身可变属性作为变更条目;Flowchart: Including the general flowchart and pop-up flowchart in the monitoring configuration, and when determining the object relationship attributes, use the flowchart as an object, and expand it downwards into graphic objects and dynamics, and use the variable of the object itself properties as change entries;
趋势图:包括监控组态中所述位号的实时和历史趋势画面,并在确定对象关系属性时,将所述趋势图作为对象,以对象的自身可变属性作为变更条目。Trend graph: It includes the real-time and historical trend screens of the tag in the monitoring configuration, and when determining the object relationship attribute, the trend graph is used as the object, and the variable attribute of the object itself is used as the change item.
进一步地,在步骤S2中,对所述历史组态数据进行审计,具体为:Further, in step S2, audit the historical configuration data, specifically:
S21:根据所述基线中存储的对象将审计数据划分审计树,所述审计树为所述程序逻辑的流图的节点树;S21: Divide the audit data into an audit tree according to the objects stored in the baseline, where the audit tree is a node tree of a flow graph of the program logic;
S22:选用所述程序逻辑的图形化作为变更图的模型,将所述位号和所述功能块对象作为所述变更图中的节点,在图形上展示所述位号和所述功能块的引脚关系、引脚变化关系、自身属性变化关系;S22: Select the graphic of the program logic as the model of the change diagram, use the bit number and the function block object as nodes in the change diagram, and display the bit number and the function block on the graph Pin relationship, pin change relationship, self-property change relationship;
S23:将所述位号与所述功能块的所述组态数据糅合进所述变更图的所述节点中;S23: Blending the bit number and the configuration data of the function block into the nodes of the change graph;
S24:基于每一个所述节点,从当前节点的前置引脚查询需进行比对的两条所述基线的前置节点,判断两条所述基线中所述位号和所述功能块的引脚关系、引脚变化关系、自身属性变化关系,在所述变更图上采用不同形式的接线表示包括新增、删除、不变在内的引脚变化关系,并在所述节点下方显示包括新增、删除、变更在内的节点数据变化情况;S24: Based on each of the nodes, query the preceding nodes of the two baselines that need to be compared from the leading pins of the current node, and determine the bit numbers and the function blocks in the two baselines Pin relationship, pin change relationship, and self-attribute change relationship, using different forms of wiring on the change graph to represent pin change relationships including addition, deletion, and unchanged, and displaying below the nodes including Changes in node data including addition, deletion, and modification;
S25:从所有所述节点中查找前置引脚为所述当前节点的所述节点,为所述当前节点的后置节点;S25: Find the node whose front pin is the current node from all the nodes, which is the post node of the current node;
S26:重复步骤S24和S25,生成表述完整的节点连接逻辑的所述变更图。S26: Steps S24 and S25 are repeated to generate the change graph expressing complete node connection logic.
进一步地,工业控制基线审计方法,还包括:建立所述基线库的展示页面,对所述基线库中存储的所有所述基线进行展示;在所述展示页面中包括查询、标注重点版本、删除基线、基线对比、对比结果查询在内的操作按钮。Further, the industrial control baseline audit method also includes: establishing a display page of the baseline library, displaying all the baselines stored in the baseline library; including querying, marking key versions, deleting Operation buttons including baseline, baseline comparison, and comparison result query.
一种用于执行如上述的工业控制基线审计方法的系统,包括:A system for performing an industrial control baseline audit method as described above, comprising:
基线存储模块,用于对当前组态数据的变更进行检测,当检测到所述当前组态数据变更后,生成所述当前组态数据的基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到工业控制系统的基线库中;The baseline storage module is used to detect the change of the current configuration data. When the change of the current configuration data is detected, the baseline of the current configuration data is generated, and the current configuration data is collected and stored in the In the baseline, the baseline is added to the baseline library of the industrial control system;
基线审计模块,用于对历史组态数据的变更进行审计,获取所述基线库中需进行比对的两条所述基线,对两条所述基线中存储的所述历史组态数据进行比对,并展示比对结果。The baseline audit module is used to audit the changes of historical configuration data, obtain the two baselines that need to be compared in the baseline database, and compare the historical configuration data stored in the two baselines Yes, and display the comparison results.
一种计算机设备,包括存储器和一个或多个处理器,所述存储器中存储有计算机代码,所述计算机代码被所述一个或多个处理器执行时,使得所述一个或多个处理器执行如上述的方法。A computer device comprising a memory and one or more processors, the memory storing computer code which, when executed by the one or more processors, causes the one or more processors to perform As above method.
一种计算机可读存储介质,所述计算机可读存储介质存储有计算机代码,当所述计算机代码被执行时,如上述的方法被执行。A computer-readable storage medium, the computer-readable storage medium stores computer codes, and when the computer codes are executed, the above method is executed.
与现有技术相比,本发明包括以下至少一种有益效果是:Compared with the prior art, the present invention includes at least one of the following beneficial effects:
通过提供一种工业控制基线审计方法,包括步骤:S1:对当前组态数据的变更进行检测,当检测到所述当前组态数据变更后,生成所述当前组态数据的基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到工业控制系统的基线库中;S2:对历史组态数据的变更进行审计,获取所述基线库中需进行比对的两条所述基线,对两条所述基线中存储的所述历史组态数据进行比对,并展示比对结果。本发明基于上述技术方案,能够读取控制系统数据并将存在变更的基线记录下来,提供历史审计记录详情的查看,并支持任意基线的比对,做到了对控制系统数据的基线与审计管理。By providing an industrial control baseline audit method, including steps: S1: Detect changes in the current configuration data, when the changes in the current configuration data are detected, generate a baseline of the current configuration data, and collect all The current configuration data is stored in the baseline, and the baseline is added to the baseline library of the industrial control system; S2: Audit the change of the historical configuration data, and obtain the two items that need to be compared in the baseline library. compare the historical configuration data stored in the two baselines, and display the comparison results. Based on the above technical solution, the present invention can read the control system data and record the changed baseline, provide the viewing of the details of the historical audit records, and support the comparison of any baseline, so as to realize the baseline and audit management of the control system data.
附图说明Description of drawings
图1为本发明一种工业控制基线审计方法的整体示意图;Fig. 1 is the overall schematic diagram of a kind of industrial control baseline audit method of the present invention;
图2为本发明一种工业控制基线审计方法的整体流程图;Fig. 2 is the overall flowchart of a kind of industrial control baseline auditing method of the present invention;
图3为本发明程序逻辑-功能块位号与其引脚参数的具体举例示意图;Fig. 3 is the specific example schematic diagram of program logic-function block bit number and its pin parameter of the present invention;
图4为本发明第二实施例中变更前的程序逻辑图;Fig. 4 is a program logic diagram before modification in the second embodiment of the present invention;
图5为本发明第二实施例中变更后的程序逻辑图;Fig. 5 is a program logic diagram after modification in the second embodiment of the present invention;
图6为本发明第二实施例中为审计树与变更图的展示界面示意图;FIG. 6 is a schematic diagram of a display interface of an audit tree and a change graph in the second embodiment of the present invention;
图7为本发明第三实施例中向实施人员展示的界面示意图;Fig. 7 is a schematic diagram of an interface shown to implementers in the third embodiment of the present invention;
图8为本发明一种工业控制基线审计系统的整体示意图。FIG. 8 is an overall schematic diagram of an industrial control baseline audit system of the present invention.
具体实施方式detailed description
为使本申请实施例的目的、技术方案和优点更加清楚,下面将结合本申请实施例中的附图,对本申请实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本申请一部分实施例,而不是全部的实施例。基于本申请中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本申请保护的范围。In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments It is a part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.
本技术领域技术人员可以理解,除非特意声明,这里使用的单数形式“一”、“一个”、“所述”和“该”也可包括复数形式。应该进一步理解的是,本发明的说明书中使用的措辞“包括”是指存在所述特征、整数、步骤、操作、元件和/或组件,但是并不排除存在或添加一个或多个其他特征、整数、步骤、操作、元件、组件和/或它们的组。Those skilled in the art will understand that unless otherwise stated, the singular forms "a", "an", "said" and "the" used herein may also include plural forms. It should be further understood that the word "comprising" used in the description of the present invention refers to the presence of said features, integers, steps, operations, elements and/or components, but does not exclude the presence or addition of one or more other features, Integers, steps, operations, elements, components, and/or groups thereof.
控制系统基线审计的方法是对整个控制系统的数据存在变更的发布做一个版本存档,方便用户管理时间轴上的数据,解决了数据维护困难的问题,答答降低维护门槛,降低工厂规模扩张成本。The method of control system baseline audit is to make a version archive for the release of changes in the data of the entire control system, which is convenient for users to manage data on the time axis, solves the problem of difficult data maintenance, lowers the maintenance threshold, and reduces the cost of factory scale expansion .
本发明的方法主要有以下优点:支持组态差异对比;基于对象的组态差异展示方式打破了仅在组态内统合数据的传统,可以精准定位入口,总览组态变更,使组态变更的展示更人性化、直观、生动具体。The method of the present invention mainly has the following advantages: it supports configuration difference comparison; the object-based configuration difference display method breaks the tradition of only integrating data in the configuration, and can accurately locate the entry, overview configuration changes, and make configuration changes easy The display is more humane, intuitive, vivid and specific.
本发明中涉及到的术语解释:Explanation of terms involved in the present invention:
控制系统/工业控制系统(ICS):用于工业过程控制的控制系统,具有对生产设备数据的采集,对控制逻辑的运算,以及对生产设备进行管理的功能。Control system/Industrial Control System (ICS): A control system used for industrial process control, which has the functions of collecting production equipment data, operating control logic, and managing production equipment.
组态数据:控制系统为了实现对生产设备的数据采集和控制,需要预设对生产设备的模拟数据,编写控制逻辑程序等预先设置好的数据,这些数据被称为组态数据。Configuration data: In order to realize the data acquisition and control of production equipment, the control system needs to preset the simulation data of the production equipment, write the control logic program and other pre-set data, these data are called configuration data.
基线:组态数据的一次版本存档。Baseline: A single version archive of configuration data.
审计:对组态数据变更的识别操作。Audit: The identification of changes to configuration data.
控制器:用于自动化控制的数字逻辑控制器,可以将控制指令随时加载内存存储与执行。Controller: A digital logic controller used for automatic control, which can load control instructions into memory for storage and execution at any time.
控制程序:用于控制系统内部定义控制逻辑的一种方式,可以通过图形的方式定义控制逻辑,控制系统可以将这些对应的逻辑进行运算并做进一步的处理。Control program: A method used to define the control logic inside the control system. The control logic can be defined graphically, and the control system can perform calculations on these corresponding logics and perform further processing.
位号:控制系统中的数据源或输出源,控制系统中仪表硬件的数据通过硬件连线连接到控制器中,位号就代表了仪表的输入数据或者将要输出到仪表的数据。Bit number: the data source or output source in the control system. The data of the instrument hardware in the control system is connected to the controller through the hardware connection. The bit number represents the input data of the instrument or the data to be output to the instrument.
功能块:控制系统中控制程序中的运算块,用户实现某个特定的功能,具有各种不同的类型。例如ADD功能块用于对数据源执行加法操作。Function block: the operation block in the control program in the control system, the user realizes a specific function, and has various types. For example, the ADD function block is used to perform an addition operation on a data source.
前置节点:输入到当前节点的节点。Predecessor node: the node that is input to the current node.
后置节点:当前节点输出到的节点。Post node: the node to which the current node outputs.
节点:控制程序在抽象为图形的时候,位号跟功能块显示成了若干个节点,节点指代位号或功能块。Node: When the control program is abstracted into a graph, the bit number and the function block are displayed as several nodes, and the node refers to the bit number or the function block.
引脚:节点中特定的功能值。Pin: A specific functional value in a node.
本发明基线管理模型的定义:选用线性版本管理模型,即:按版本出现的先后次序排列的简单模型。一个工业控制工程的版本集合(基线)组成一个版本集(基线库),版本集内的元素按照时间排序,但无继承关系,新元素只能往后增加,所有版本皆可读写。The definition of the baseline management model of the present invention: select the linear version management model, that is, a simple model arranged in the order of appearance of the versions. A version set (baseline) of an industrial control project forms a version set (baseline library). The elements in the version set are sorted by time, but there is no inheritance relationship. New elements can only be added later, and all versions can be read and written.
本发明的基线管理方法:选用有限记录版本法,所有版本皆完整存储版本数据,并无前驱与后继区分,单个工程仅允许存储有限数量的基线数据,除实施人员主动废除一些旧基线外,生成新基线时如果达到限制,也将废除一些旧基线,以减少空间占用。The baseline management method of the present invention: the limited record version method is selected, all versions store version data completely, there is no distinction between predecessors and successors, and a single project is only allowed to store a limited number of baseline data, except for implementing personnel who actively abolish some old baselines, generate If the limit is reached during the new baseline, some old baselines will also be abolished to reduce space consumption.
第一实施例first embodiment
如图1和图2所示,本实施例提供了一种工业控制基线审计方法,包括以下步骤:As shown in Figure 1 and Figure 2, the present embodiment provides a kind of industrial control baseline auditing method, comprises the following steps:
S1:对当前组态数据的变更进行检测,当检测到所述当前组态数据变更后,生成所述当前组态数据的基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到工业控制系统的基线库中。S1: Detect the change of the current configuration data. When the change of the current configuration data is detected, generate the baseline of the current configuration data, collect the current configuration data and store it in the baseline, and store the current configuration data in the baseline. The baseline is added to the baseline library of the industrial control system.
S2:对历史组态数据的变更进行审计,获取所述基线库中需进行比对的两条所述基线,对两条所述基线中存储的所述历史组态数据进行比对,并展示比对结果。S2: Audit the changes of historical configuration data, obtain the two baselines that need to be compared in the baseline library, compare the historical configuration data stored in the two baselines, and display Compare the results.
具体的,在本实施例中,步骤S1为本发明基线存储的步骤,步骤S2为本发明基线审计的步骤,以下对步骤S1的基线存储和步骤S2的基线审计进行详细的说明。Specifically, in this embodiment, step S1 is the step of baseline storage in the present invention, and step S2 is the step of baseline audit in the present invention. The baseline storage of step S1 and the baseline audit of step S2 will be described in detail below.
步骤S1基线存储,具体包括以下细分步骤:Step S1 baseline storage, specifically includes the following subdivision steps:
S11:检测实施人员的数据采集操作,当检测到所述数据采集操作之后,将所述当前组态数据存储为临时版本数据。S11: Detect the data collection operation of the implementer, and store the current configuration data as temporary version data after the data collection operation is detected.
由于实施人员无论是进行数据的查看操作,还是数据的新增、修改或删除操作,在操作之前均会对存储于工业控制系统的数据库中的数据进行读取采集,因此我们将实施人员进行数据采集的操作作为触发基线生成的时间节点,当实施人员进行数据采集时,系统将自动读取当前数据,存储为一次临时的版本数据。Because the implementation personnel will read and collect the data stored in the database of the industrial control system before the operation, whether they are viewing the data or adding, modifying or deleting the data, so we will implement the data The collection operation is used as the time node to trigger the generation of the baseline. When the implementer collects the data, the system will automatically read the current data and store it as a temporary version data.
S12:获取所述基线库中最后一条所述基线,根据预先配置的变更条目将所述临时版本数据与最后一条所述基线进行比对。S12: Obtain the last baseline in the baseline library, and compare the temporary version data with the last baseline according to the pre-configured change items.
具体的,由于通过数据采集触发的读取的当前数据,我们没有办法预测实施人员是否对数据进行了修改,因此我们需要获取基线库中的最后一条基线,将临时版本数据与基线库中最后一条数据进行比对。比对的方式为根据用户预先配置的变更识别规则判断组态数据的变更。Specifically, due to the current data read triggered by data collection, we have no way to predict whether the implementer has modified the data, so we need to obtain the last baseline in the baseline library, and compare the temporary version data with the last one in the baseline library data for comparison. The way of comparison is to judge the change of the configuration data according to the change identification rules pre-configured by the user.
S13:当所述临时版本数据与最后一条所述基线的比对结果存在数据变更时,生成所述当前组态数据的所述基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到所述工业控制系统的所述基线库中,否则放弃所述临时版本数据,不生成所述当前组态数据的所述基线。S13: When there is a data change in the comparison result between the temporary version data and the last baseline, generate the baseline of the current configuration data, collect the current configuration data and store it in the baseline, Adding the baseline to the baseline library of the industrial control system, otherwise discarding the temporary version data and not generating the baseline of the current configuration data.
S14:在所述工业控制系统操作过程中,重复步骤S11-S13,为所述基线库增加所述基线。S14: During the operation of the industrial control system, repeat steps S11-S13 to add the baseline to the baseline database.
具体的,在整个工业控制系统运行的过程中,需要不断的检测实施人员采集数据的操作,当检测到数据更新时,即将当前数据生成基线,存入基线库,为基线库增加基线。基线具有时间轴按照时间排序、注释、操作历史等信息,同时支持删改。不同基线之间无继承关系,新的基线按照时间顺序在基线库中新增。Specifically, during the operation of the entire industrial control system, it is necessary to continuously detect the operation of data collection by the implementers. When the data is updated, the current data will be generated as a baseline, stored in the baseline database, and added to the baseline database. The baseline has information such as time axis sorted by time, notes, operation history, etc., and supports deletion and modification. There is no inheritance relationship between different baselines, and new baselines are added in the baseline library in chronological order.
进一步地,在步骤S1中,在生成基线之前,还包括:根据所述基线库中的数据存储规则,对采集的所述当前组态数据进行数据分类与整合,分类与整合后将与所述基线库中所述数据存储规则相匹配的所述当前组态数据存储到所述基线中,将所述基线增加到所述工业控制系统的所述基线库中。Further, in step S1, before generating the baseline, it also includes: performing data classification and integration on the collected current configuration data according to the data storage rules in the baseline database, and after classification and integration, it will be combined with the The current configuration data matching the data storage rule in the baseline library is stored in the baseline, and the baseline is added to the baseline library of the industrial control system.
具体的,由于工业控制系统中存储的数据的数据存储规则不一定与基线库中的数据存储规则一样,同时由于本发明的基线库适用于不同的工业控制系统,不同的工业控制系统中数据的数据存储规则也不一定相同。因此,我们在生成基线之前,需要根据基线库中的数据存储规则,对采集到的当前数据进行数据分类与整合,使之适应基线库的存储规则。在下文中,将会对基线库中的数据存储规则进行详细的说明。Specifically, because the data storage rules of the data stored in the industrial control system are not necessarily the same as the data storage rules in the baseline library, and because the baseline library of the present invention is applicable to different industrial control systems, the data storage rules in different industrial control systems The data storage rules are not necessarily the same either. Therefore, before generating the baseline, we need to classify and integrate the collected current data according to the data storage rules in the baseline library, so as to adapt to the storage rules of the baseline library. In the following, the data storage rules in the baseline library will be described in detail.
基线存储规则:基线库中的数据存储规将组态数据划分为五类:Baseline storage rules: The data storage rules in the baseline library divide configuration data into five categories:
(1)位号:包括模入AI、模出AO、开入DI、开出DO、自定义模拟量NA、自定义开关量ND、自定义整型量NN、页间交换模拟量PA、页间交换开关量PD、页间交换整型量PN在内的所述位号,并在确定对象关系属性时,将所述位号作为对象,将包括位号描述在内的自身可变属性作为所述位号的变更条目。(1) Bit number: including module input AI, module output AO, input DI, output DO, custom analog NA, custom switch ND, custom integer NN, page-to-page exchange analog PA, page Exchange the bit number including the switch quantity PD and the integer amount PN between pages, and when determining the object relationship attribute, use the bit number as an object, and use the self-variable attribute including the bit number description as The change entry for the tag.
(2)功能块:包括ASH高选功能块、MANUAL手操器功能块在内的所述功能块,并在确定对象关系属性时,将所述功能块作为对象,将包括功能块类型在内的自身可变属性作为所述功能块的变更条目。(2) Function block: described function block including ASH high-selection function block, MANUAL hand-operated device function block, and when determining object relationship attribute, with described function block as object, will include function block type The variable attribute of itself is used as the change item of the function block.
(3)程序逻辑:包括功能框图FBD、梯形图LD、顺序功能图SFC在内的所述程序逻辑,所述逻辑程序内部包含所述功能块与所述位号的接线关系,并在确定对象关系属性时,将程序作为对象,并向下展开为功能块引脚和位号块引脚对象,以所述功能块引脚和所述位号块引脚对象的自身可变属性作为变更条目。(3) Program logic: the program logic comprising function block diagram FBD, ladder diagram LD, and sequential function chart SFC, the logic program contains the wiring relationship between the function block and the bit number, and determines the object For relationship attributes, take the program as an object and expand it downwards into function block pins and tag block pin objects, and use the variable attributes of the function block pins and the tag block pin objects as change items .
如图3所示,为一个程序逻辑-功能块位号与其引脚参数的具体举例。具体为:As shown in Figure 3, it is a specific example of a program logic-function block bit number and its pin parameters. Specifically:
较小的矩形长条(如AI00020003.PV)为位号节点;Smaller rectangular strips (such as AI00020003.PV) are tag nodes;
较大的矩形方块(如左下角标注p0081的节点)为功能块节点;Larger rectangular blocks (such as the node marked p0081 in the lower left corner) are function block nodes;
功能块节点最上方的长条表示着功能块的类型,例如p0081节点的上方写着ASH、p0084节点上方写着MANUAL,表示着p0081节点是一个ASH类型的功能块、p0084节点是一个MANUAL类型的功能块;The bar at the top of the function block node indicates the type of the function block. For example, ASH is written on the top of the p0081 node, and MANUAL is written on the top of the p0084 node, which means that the p0081 node is an ASH type function block, and the p0084 node is a MANUAL type. function block;
ASH功能块是高选功能块,是对两路输入进行选择,选择高一路的输入进行输出,MANUAL功能块是手操器功能块,可以选择手动模式或者自动模式,手动模式下手动调节输出值,自动模式下按照输入值调节输出。The ASH function block is a high-selection function block, which selects two inputs and selects the input of the high one for output. The MANUAL function block is a hand-operated function block, which can choose manual mode or automatic mode, and manually adjust the output value in manual mode. , in automatic mode, the output is adjusted according to the input value.
功能块中部显示的、与外部的连接的通道是这个功能块的引脚,靠左侧的是输入引脚,靠右侧的是输出引脚。The channel connected to the outside shown in the middle of the function block is the pin of this function block, the one on the left is the input pin, and the one on the right is the output pin.
(4)流程图:包括监控组态中的一般流程图和弹出式流程图,并在确定对象关系属性时,将所述流程图作为对象,并向下展开为图形对象和动态,以对象的自身可变属性作为变更条目。(4) Flowchart: Including the general flowchart and pop-up flowchart in the monitoring configuration, and when determining the object relationship attribute, take the described flowchart as an object, and expand it downwards into graphic objects and dynamics, and use the object's Self-mutable attributes act as change entries.
(5)趋势图:包括监控组态中所述位号的实时和历史趋势画面,并在确定对象关系属性时,将所述趋势图作为对象,以对象的自身可变属性作为变更条目。(5) Trend graph: including the real-time and historical trend screens of the bit numbers in the monitoring configuration, and when determining the object relationship attribute, the trend graph is used as the object, and the variable attribute of the object itself is used as the change item.
步骤S2基线审计,具体包括以下细分步骤:Step S2 baseline audit, specifically includes the following subdivided steps:
S21:根据所述基线中存储的对象将审计数据划分审计树,所述审计树为所述程序逻辑的流图的节点树。节点树可以快速定位程序流图节点,其数据与样式即是变更数据的展现形式。S21: Divide the audit data into an audit tree according to the objects stored in the baseline, where the audit tree is a node tree of a flow graph of the program logic. The node tree can quickly locate the nodes of the program flow graph, and its data and style are the presentation forms of the changed data.
S22:在五类组态数据中,选用所述程序逻辑的图形化作为变更图的模型,将所述位号和所述功能块对象作为所述变更图中的节点,在图形上展示所述位号和所述功能块的引脚关系、引脚变化关系、自身属性变化关系。S22: Among the five types of configuration data, select the graphic of the program logic as the model of the change graph, use the bit number and the function block object as nodes in the change graph, and display the graph on the graph The bit number and the pin relationship, pin change relationship, and self-attribute change relationship of the function block.
S23:将所述位号与所述功能块的所述组态数据糅合进所述变更图的所述节点中。S23: Combine the bit number and the configuration data of the function block into the nodes of the change graph.
S24:基于每一个所述节点,从当前节点的前置引脚查询需进行比对的两条所述基线的前置节点,判断两条所述基线中所述位号和所述功能块的引脚关系、引脚变化关系、自身属性变化关系,在所述变更图上采用不同形式的接线(可以不同颜色、不同粗细、不同类型的线条等等)表示包括新增、删除、不变在内的引脚变化关系,并在所述节点下方显示包括新增、删除、变更在内的节点数据变化情况。S24: Based on each of the nodes, query the preceding nodes of the two baselines that need to be compared from the leading pins of the current node, and determine the bit numbers and the function blocks in the two baselines Pin relationship, pin change relationship, self-attribute change relationship, on the change diagram, different forms of wiring (can be different colors, different thicknesses, different types of lines, etc.) The pin change relationship within the node, and the node data changes including addition, deletion, and change are displayed below the node.
S25:从所有所述节点中查找前置引脚为所述当前节点的所述节点,为所述当前节点的后置节点。S25: Find the node whose preceding pin is the current node from all the nodes, which is the succeeding node of the current node.
S26:重复步骤S24和S25,生成表述完整的节点连接逻辑的所述变更图。S26: Steps S24 and S25 are repeated to generate the change graph expressing complete node connection logic.
第二实施例second embodiment
如图4-6所示,本实施例是一个展示程序变更的图形化方法的具体举例。图4为变更前的程序逻辑图,图5为变更后的程序逻辑图,图6为审计树与变更图的展示界面示意图。As shown in FIGS. 4-6 , this embodiment is a specific example of a graphical method for displaying program changes. Figure 4 is the program logic diagram before the change, Figure 5 is the program logic diagram after the change, and Figure 6 is a schematic diagram of the display interface of the audit tree and the change diagram.
将图4变更成图5,存在变更如下:Change Figure 4 to Figure 5, the existing changes are as follows:
p0081的输入引脚IN1连接AI00020003.PV删除;The input pin IN1 of p0081 is connected to AI00020003.PV delete;
p0081的输入引脚IN2连接从AI00020004.PV改成AI00020002.PV;The input pin IN2 connection of p0081 is changed from AI00020004.PV to AI00020002.PV;
p0081的输入引脚BKIN连接AI00020001.PV新增;The input pin BKIN of p0081 is connected to AI00020001.PV newly added;
p00811的输入引脚IN1连接从AI00020005.PV改成AI00020006.PV;The input pin IN1 connection of p00811 is changed from AI00020005.PV to AI00020006.PV;
p00811的输入引脚IN2连接从AI00020006.PV改成AI00020007.PV。The input pin IN2 connection of p00811 was changed from AI00020006.PV to AI00020007.PV.
图6为最终展示给实施人员的审计树和变更树的可视化界面示意图:Figure 6 is a schematic diagram of the visual interface of the audit tree and change tree finally displayed to the implementer:
左侧为展开树(审计树),代表不同的组态数据,其中叶子节点为对象,以域地址+站地址+对象名作为标识。如[0.2]p0081中0为域地址,2为站地址,p0081为对象名。The left side is an expanded tree (audit tree), which represents different configuration data, in which the leaf nodes are objects, identified by domain address + station address + object name. For example, in [0.2]p0081, 0 is the domain address, 2 is the station address, and p0081 is the object name.
右侧为接线关系,不同形式的线条用于区分接线关系变化,粗的实线箭头表示新增,虚线箭头表示删除,细的实线箭头表示不变,同时在节点下方使用变更标识,点击变更标识,将弹出弹框,展示具体的变更项目。因附图篇幅展示问题,无法在附图中展示出来。展示的具体内容,如下表1,实际页面中将已弹窗的形式展现。On the right side is the wiring relationship. Different forms of lines are used to distinguish the change of the wiring relationship. The thick solid arrow indicates addition, the dotted arrow indicates deletion, and the thin solid arrow indicates unchanged. At the same time, the change logo is used under the node, click Change logo, a pop-up box will pop up to display the specific change items. Due to the size of the attached drawings, it cannot be shown in the attached drawings. The specific content displayed is shown in Table 1 below, and the actual page will be displayed in the form of a pop-up window.
表1Table 1
第三实施例third embodiment
如图7所示,本实施例提供了一种向实施人员展示的界面示意图。具体为:建立所述基线库的展示页面,对所述基线库中存储的所有所述基线进行展示;在所述展示页面中包括查询、标注重点版本、删除基线、基线对比、对比结果查询在内的操作按钮。As shown in FIG. 7 , this embodiment provides a schematic interface shown to implementers. Specifically: establish the display page of the baseline library, display all the baselines stored in the baseline library; include query, mark key version, delete baseline, baseline comparison, comparison result query in the display page Action button inside.
在如图7所示的界面中,实施人员可以进行以下操作:In the interface shown in Figure 7, implementers can perform the following operations:
(1)查询:输入查询条件,即可查询版本。(1) Query: Enter the query conditions to query the version.
(2)标注重点版本:单击“基线注释”列的按钮,为编写基线注释,记录为重点版本,(2) Mark the key version: click in the "Baseline Note" column button, for writing baseline notes, recording for focused releases,
(2)删除基线:点击“操作列”的“删除”按钮,即可删除版本库中存储的版本数据。(2) Delete baseline: Click the "Delete" button in the "Operation Column" to delete the version data stored in the version repository.
(3)基线对比:单击“操作”列的“相邻对比”按钮,根据采集时间对比所选组态基线和前一条基线,或在列表中勾选两条基线,再单击上方对比按钮 (3) Baseline comparison: Click the "Adjacent Comparison" button in the "Operation" column to compare the selected configuration baseline with the previous baseline according to the collection time, or check two baselines in the list, and then click the upper comparison button
(4)单击上方按钮可查看上一次对比结果。(4) Click the button above You can view the results of the last comparison.
第四实施例Fourth embodiment
如图8所示,本实施例提供了一种用于执行如第一实施例中的工业控制基线审计方法的系统,包括:As shown in Figure 8, this embodiment provides a system for performing the industrial control baseline audit method as in the first embodiment, including:
基线存储模块1,用于对当前组态数据的变更进行检测,当检测到所述当前组态数据变更后,生成所述当前组态数据的基线,并采集所述当前组态数据存储在所述基线中,将所述基线增加到工业控制系统的基线库中;The
基线审计模块2,用于对历史组态数据的变更进行审计,获取所述基线库中需进行比对的两条所述基线,对两条所述基线中存储的所述历史组态数据进行比对,并展示比对结果。The
一种计算机可读存储介质,计算机可读存储介质存储有计算机代码,当计算机代码被执行时,如上述方法被执行。本领域普通技术人员可以理解上述实施例的各种方法中的全部或部分步骤是可以通过程序来指令相关的硬件来完成,该程序可以存储于一计算机可读存储介质中,存储介质可以包括:只读存储器(ROM,Read Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁盘或光盘等。A computer-readable storage medium stores computer codes, and when the computer codes are executed, the above method is executed. Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium can include: Read Only Memory (ROM, Read Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk, etc.
以上所述仅是本发明的优选实施方式,本发明的保护范围并不仅局限于上述实施例,凡属于本发明思路下的技术方案均属于本发明的保护范围。应当指出,对于本技术领域的普通技术人员来说,在不脱离本发明原理前提下的若干改进和润饰,这些改进和润饰也应视为本发明的保护范围。The above descriptions are only preferred implementations of the present invention, and the protection scope of the present invention is not limited to the above-mentioned embodiments, and all technical solutions under the idea of the present invention belong to the protection scope of the present invention. It should be pointed out that for those skilled in the art, some improvements and modifications without departing from the principles of the present invention should also be regarded as the protection scope of the present invention.
以上所述实施例的各技术特征可以进行任意的组合,为使描述简洁,未对上述实施例中的各个技术特征所有可能的组合都进行描述,然而,只要这些技术特征的组合不存在矛盾,都应当认为是本说明书记载的范围。The various technical features of the above-mentioned embodiments can be combined arbitrarily. For the sake of concise description, all possible combinations of the various technical features in the above-mentioned embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, should be considered as within the scope of this specification.
应当说明的是,上述实施例均可根据需要自由组合。以上所述仅是本发明的优选实施方式,应当指出,对于本技术领域的普通技术人员来说,在不脱离本发明原理的前提下,还可以做出若干改进和润饰,这些改进和润饰也应视为本发明的保护范围。It should be noted that the above embodiments can be freely combined as required. The above is only a preferred embodiment of the present invention, it should be pointed out that, for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications can also be made. It should be regarded as the protection scope of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211392354.6A CN115599789A (en) | 2022-11-08 | 2022-11-08 | Industrial control baseline auditing method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211392354.6A CN115599789A (en) | 2022-11-08 | 2022-11-08 | Industrial control baseline auditing method and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115599789A true CN115599789A (en) | 2023-01-13 |
Family
ID=84852730
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211392354.6A Pending CN115599789A (en) | 2022-11-08 | 2022-11-08 | Industrial control baseline auditing method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115599789A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20090164496A1 (en) * | 2007-12-19 | 2009-06-25 | Microsoft Corporation | Integrated governance and version audit logging |
| CN103840955A (en) * | 2012-11-22 | 2014-06-04 | 中国银联股份有限公司 | Operation maintenance system of distributed IT system, and operation maintenance management method thereof |
| EP2960813A1 (en) * | 2014-06-26 | 2015-12-30 | Sap Se | Optimization of parallelization of user-defined functions with flexible partitioning |
| CN113656220A (en) * | 2021-08-06 | 2021-11-16 | 杭州安恒信息技术股份有限公司 | PLC data baseline recovery method and device and computer storage medium |
-
2022
- 2022-11-08 CN CN202211392354.6A patent/CN115599789A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20090164496A1 (en) * | 2007-12-19 | 2009-06-25 | Microsoft Corporation | Integrated governance and version audit logging |
| CN103840955A (en) * | 2012-11-22 | 2014-06-04 | 中国银联股份有限公司 | Operation maintenance system of distributed IT system, and operation maintenance management method thereof |
| EP2960813A1 (en) * | 2014-06-26 | 2015-12-30 | Sap Se | Optimization of parallelization of user-defined functions with flexible partitioning |
| US20150379077A1 (en) * | 2014-06-26 | 2015-12-31 | Philipp Grosse | Optimization of parallelization of user-defined functions with flexible partitioning |
| CN113656220A (en) * | 2021-08-06 | 2021-11-16 | 杭州安恒信息技术股份有限公司 | PLC data baseline recovery method and device and computer storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9348581B2 (en) | Systems, method and computer program products for tracking and viewing changes to information stored in a data structure | |
| CN1804838B (en) | Document management system with timeline-based data representation | |
| US20080313158A1 (en) | Database file management system, integration module and browsing interface of database file management system, database file management method | |
| WO2022062610A1 (en) | Information presentation method and apparatus, electronic device, and storage medium | |
| US20080288462A1 (en) | Database system and display method on information terminal | |
| JP2002230038A (en) | Data display method | |
| KR20080078255A (en) | File management method and device and information storage medium storing the file | |
| JPH022419A (en) | Program information control system | |
| WO2021082581A9 (en) | File system | |
| CN113111633A (en) | Online editing method, system, terminal and storage medium for power grid evaluation opinions | |
| CN115599789A (en) | Industrial control baseline auditing method and system | |
| CN113674115A (en) | College data management auxiliary system and method based on data management technology | |
| CN117216586B (en) | Method, device, medium and equipment for generating presentation template | |
| CN117312774A (en) | An intelligent aggregation visualization and management control system for big data | |
| JP7287486B2 (en) | Attachment and restoration of sticky notes to visualized data | |
| JP5916897B2 (en) | Project data creation device | |
| CN113505127B (en) | Storage structure and method, retrieval and visualization method for data of related objects | |
| JP2002108649A (en) | Recording medium and program product recording program for supporting trace analysis | |
| KR100809452B1 (en) | Patent classification method and system using computing device | |
| JP5302529B2 (en) | Information processing apparatus, information processing method, program, and recording medium | |
| US12424014B2 (en) | Graphical diagram comparison | |
| CN118690015B (en) | An electronic file management method, system and electronic equipment for tobacco industry project management | |
| JP6290805B2 (en) | File management apparatus, file management method, user interface providing method, and file management program | |
| CN113468435A (en) | Information screening method and device | |
| CN119621223B (en) | Image analysis method and image analysis device based on product |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Country or region after: China Address after: 310053 No. 309 Liuhe Road, Binjiang District, Hangzhou City, Zhejiang Province Applicant after: Zhongkong Technology Co.,Ltd. Address before: 310053 No. 309 Liuhe Road, Binjiang District, Hangzhou City, Zhejiang Province Applicant before: ZHEJIANG SUPCON TECHNOLOGY Co.,Ltd. Country or region before: China |