CN115941818A - A method for analyzing and controlling a hot-loaded industrial control protocol and a system having the same - Google Patents

Abstract

The application relates to the technical field of industrial control protocol loading, in particular to a method for analyzing and controlling a hot-loading industrial control protocol and a system with the same. A method for analyzing and controlling a hot-loading industrial control protocol comprises the steps of obtaining a feature library, wherein an analysis identification code of the industrial control protocol is packaged in the feature library; uploading the feature library to industrial control equipment according to a preset target path, and sending a loading instruction to the industrial control equipment, wherein the industrial control equipment comprises an industrial control protocol analysis module; the industrial control protocol analysis module responds to the loading instruction and loads the feature library from the target path; the industrial control protocol analysis module analyzes the industrial control message based on the analysis identification code in the feature library; and the industrial control equipment controls the industrial control message according to the analysis result of the industrial control message. According to the method for analyzing and controlling the hot-loading industrial control protocol, the identification and control of the newly added industrial control protocol can be realized without restarting an industrial control protocol analyzing module or a restarting system and replacing an industrial control equipment version mirror image.

Description

A method for analyzing and controlling a hot-loaded industrial control protocol and a system having the same

technical field

The present application relates to the technical field of industrial control protocol loading, in particular to a method for parsing and controlling a hot loading industrial control protocol and a system thereof.

Background technique

With the development of information technology, industrial control systems are gradually becoming open, interconnected and universal. Many industrial control protocols are gradually running on industrial Ethernet. Among them, there are various types of industrial control protocols, many of which are private protocols designed by industrial control equipment manufacturers and are not disclosed to the public. All of these pose huge challenges to the in-depth analysis of industrial control protocols.

The traditional implementation of in-depth analysis of industrial control protocols is to hard-code the in-depth analysis process of certain industrial control protocols into the industrial control protocol analysis module after fully understanding and mastering the industrial control protocols. When a corresponding industrial control protocol message enters During the in-depth analysis process, the message will be analyzed according to the previously hard-coded in-depth analysis process of the industrial control protocol.

However, since the code hard-coded into the industrial control protocol analysis has been fixed, when adding an industrial control protocol, it is necessary to modify the entire analysis module, restart the analysis module or restart the system, or even replace the device version image.

Contents of the invention

The present application relates to a hot-loading industrial control protocol analysis and control method and a system thereof, which can solve the problem in the prior art that, since the code hard-coded into the industrial control protocol analysis has been fixed, it is necessary to modify the entire analysis module and restart when adding an industrial control protocol. Operations such as parsing modules or restarting the system may even require changing the device version image.

The first aspect of the present application provides a method for analyzing and controlling the hot loading industrial control protocol, including:

Obtaining a feature library, wherein the feature library is encapsulated with a parsing identification code of an industrial control protocol;

Upload the feature library to the industrial control device according to the preset target path, and send a loading instruction to the industrial control device, wherein the industrial control device includes an industrial control protocol analysis module;

The industrial control protocol analysis module loads the feature library from the target path in response to the loading instruction;

The industrial control protocol analysis module analyzes the industrial control message based on the analysis identification code in the feature library;

The industrial control device controls the industrial control message according to the parsing result of the industrial control message.

In an achievable implementation manner, the step of loading the feature library from the target path by the industrial control protocol parsing module in response to the loading instruction includes:

The industrial control protocol analysis module establishes a dynamic library and an interface of the dynamic library, wherein the interface is at least used for the industrial control protocol analysis module to query the industrial control protocol currently supported by the feature library;

The dynamic library numbers the industrial control protocol of the feature library.

In an achievable implementation manner, the step of uploading the feature library to the industrial control device according to the preset target path, and sending a loading instruction to the industrial control device includes:

Based on the transmission mode of http or ftp, the feature library is uploaded to the industrial control device through the target path;

Send a loading instruction to the industrial control protocol analysis module.

In an implementation manner that can be realized, the step of loading the feature library from the target path by the industrial control protocol parsing module in response to the loading instruction includes:

In response to the loading instruction, the industrial control protocol analysis module sets the global function pointer to a null value, wherein the global function pointer is used to indicate the interface location of the dynamic library;

The industrial control protocol analysis module opens the dynamic library according to the system call function of the dynamic library, and reassigns the global function pointer, so that the industrial control protocol analysis module calls according to the reassigned global function pointer The interface to the dynamic library.

In an achievable implementation manner, the step of parsing the industrial control message by the industrial control protocol parsing module based on the parsing identification code in the feature library includes:

The industrial control protocol analysis module calls the interface of the dynamic library to analyze the industrial control message;

The industrial control protocol analysis module receives the analysis result returned by the dynamic library, and the analysis result includes the industrial control protocol number corresponding to the industrial control message, the memory block of the analysis result, and the size of the memory block.

In an achievable implementation manner, the step of parsing the industrial control message by the industrial control protocol parsing module based on the parsing identification code in the feature library further includes:

The industrial control protocol parsing module sends at least one rule information to the dynamic library through the interface of the dynamic library, wherein each rule information includes at least a rule template name, an industrial control protocol number, the number of target fields, and the Matching rules for the target field described above;

The dynamic library stores the rule information with the same rule template name under the same rule template, so as to obtain the rule chain corresponding to each rule template.

In an achievable implementation manner, the step of parsing the industrial control message by the industrial control protocol parsing module based on the parsing identification code in the feature library includes:

The industrial control protocol parsing module calls the interface of the dynamic library to send matching information to the dynamic library, wherein the matching information includes a rule template name and the parsing result;

The dynamic library determines the target rule template according to the name of the rule template, traverses the rule chain of the target rule template to match the parsing result, and forwards or discards the industrial control message according to the matching result.

The second aspect of the present application provides a system for analyzing and controlling a hot-loading industrial control protocol, including the aforementioned method for analyzing and controlling a hot-loading industrial control protocol, including:

An acquisition unit, configured to acquire a feature library, wherein the feature library is encapsulated with a parsing identification code of an industrial control protocol;

A transmission unit, configured to upload the feature library to the industrial control device according to a preset target path, and send a loading instruction to the industrial control device, wherein the industrial control device includes an industrial control protocol analysis module;

a response unit, configured for the industrial control protocol analysis module to load the feature library from the target path in response to the loading instruction;

The identification unit is used for the industrial control protocol analysis module to analyze the industrial control message based on the analysis identification code in the feature library;

The control unit is used for the industrial control device to control the industrial control message according to the analysis result of the industrial control message.

The third aspect of the present application provides an electronic device, including:

processor;

memory for storing said processor-executable instructions;

The processor is configured to read the executable instruction from the memory, and execute the instruction to implement the aforementioned method for analyzing and controlling the hot loading industrial control protocol.

The fourth aspect of the present application provides a computer-readable storage medium, on which computer program instructions are stored. When the program instructions are executed by a processor, the steps of the method for analyzing and controlling the aforementioned hot loading industrial control protocol can be realized.

The beneficial effect of the method for analyzing and controlling a hot-loaded industrial control protocol of the present application is to encapsulate the analysis identification code of the industrial control protocol in the feature library, and then upload the feature library to the industrial control device according to the target path, and the industrial control protocol analysis module in the industrial control device In response to the received loading instruction, the feature library is loaded, and after the loading is completed, the industrial control protocol analysis module analyzes the industrial control message by using the analysis identification code in the feature library. In this method, the identification and control of new industrial control protocols can be realized without restarting the industrial control protocol analysis module or restarting the system, and without replacing the version image of the industrial control equipment.

Description of drawings

In order to more clearly illustrate the specific implementation of the present invention or the technical solutions in the prior art, the following will briefly introduce the accompanying drawings that need to be used in the specific implementation or description of the prior art. Obviously, the accompanying drawings in the following description The drawings show some implementations of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.

Fig. 1 is the flow chart of the method for analyzing and controlling a kind of hot loading industrial control agreement of the present application;

Fig. 2 is the flow chart of uploading the characteristic library of the method for the analysis and control of a hot loading industrial control protocol to the industrial control equipment of the present application;

Fig. 3 is a flow chart of numbering the industrial control protocol of a method for thermal loading industrial control protocol analysis and control in the present application;

Fig. 4 is the flow chart of the global function pointer setting of a kind of hot loading industrial control protocol analysis and control method of the present application;

Fig. 5 is a flow chart of returning an analysis result to an interface of a dynamic library by an industrial control protocol analysis module of a method for hot loading industrial control protocol analysis and control in the present application;

Fig. 6 is a sequence diagram of a method for analyzing and controlling a hot loading industrial control protocol of the present application;

Fig. 7 is a flow chart of establishing rule information of a method for analyzing and controlling a hot loading industrial control protocol in the present application;

FIG. 8 is a schematic diagram of a rule chain of a method for analyzing and controlling a hot-loading industrial control protocol in the present application;

FIG. 9 is a flow chart of controlling the industrial control protocol in a method for analyzing and controlling the hot loading industrial control protocol of the present application.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In order to facilitate the implementation of the technical solution of the application, some concepts involved in the application are firstly described below.

The feature library is a data warehouse. Based on the set features, the data and protocols with the features are collected in the same library, which is convenient for invoking data and protocols and for unified management.

http, Hyper Text Transportation Protocol, Hypertext Transfer Protocol, used to transfer files on the World Wide Web.

ftp, File Transportation Protocol, a file transfer protocol, is used to upload and download files between an FTP server and a client computer in the network using TCP, and can copy files from one host to another.

A memory block is a memory block, a continuous memory segment that carries several value units at runtime. Different memory blocks may have different sizes, depending on the size of the value units they carry.

Referring to Figures 1 to 9, the first aspect of the present application provides a thermal loading industrial control protocol and control method including:

As shown in FIG. 1, S100: Obtain a feature library.

Wherein, the analysis identification code of the industrial control protocol is encapsulated in the feature library.

When the industrial control protocol is used, it is necessary to analyze the industrial control protocol, and then analyze the industrial control protocol message according to the analyzed content. The analysis identification code corresponding to the industrial control protocol is encapsulated in the feature library, which facilitates the analysis of the industrial control protocol by the analysis identification code. In addition, because there are many types of industrial control protocols, the analysis identification codes of multiple industrial control protocols can be integrated in the feature library, so that different types of industrial control protocols can be analyzed accordingly.

It should be noted that the analysis identification codes in the feature database can be added as needed, so as to cope with the update or upgrade of the subsequent industrial control protocol, and the feature library with the analysis identification codes needs to be acquired again.

S200: Upload the feature library to the industrial control device according to the preset target path, and send a loading instruction to the industrial control device.

Wherein, the industrial control equipment includes an industrial control protocol analysis module, and the industrial control protocol analysis module is used to analyze the industrial control message.

It should be noted that the industrial control protocol parsing module can be set in the industrial control equipment and connected externally to the industrial control equipment. The industrial control protocol analysis module analyzes the industrial control messages required by the industrial control equipment.

When the feature library is uploaded to the industrial control equipment, it will send a loading command to the industrial control equipment, so that the industrial control equipment can be loaded, so that when explaining the industrial control message, the industrial control protocol analysis identification code in the feature library is called to analyze the industrial control message. .

As shown in FIG. 2, specifically, uploading the feature database to the industrial control device includes steps S201 and S202.

S201: Based on the transmission mode of http or ftp, the feature library is uploaded to the industrial control device through the target path.

Wherein, the target path can be the network address of the industrial control equipment, and the feature library is transmitted from a server (the server can also be a computer device with http or ftp transmission mode) to the industrial control equipment by using http or ftp transmission mode.

It should be noted that the transfer of the signature database from the server to the industrial control equipment can also be performed through other transmission protocols, or the signature database can be directly copied to the industrial control equipment by using an external memory.

S202: Send a loading instruction to the industrial control protocol analysis module.

Wherein, after the feature library is transmitted to the industrial control equipment, a loading instruction is sent to the industrial control protocol analysis module, so that the industrial control protocol analysis module can load the feature library.

Specifically, in the process of upgrading the signature database, the signature database file is first uploaded to the specified path through http or ftp. Then, through signal processing, a signal is sent to the industrial control protocol analysis module to notify the industrial control protocol analysis module to reload the feature library. Next, the industrial control protocol analysis module loads a new feature library after receiving the signal.

It should be noted that the loading instruction can be transmitted to the industrial control equipment together with the signature library. When the signature library is not transferred, it is in a dormant state. The loading instruction responds to the information that the signature library is uploaded and sends a loading instruction to the industrial control protocol analysis module. . Alternatively, after the feature library is uploaded, the server sends a loading command to the industrial control protocol analysis module.

S300: The industrial control protocol parsing module loads the feature library from the target path in response to the loading instruction.

Wherein, the industrial control protocol analysis module loads the feature library from the target path after receiving the loading instruction, so that when the industrial control protocol analysis module receives the industrial control message, it can analyze the industrial control message by calling the analysis identification code of the industrial control protocol in the feature library.

It should be noted that since the feature library encapsulates the analysis identification codes of multiple industrial control protocols, the industrial control protocols need to be numbered, including steps S301 and S302.

As shown in FIG. 3 , S301 : the industrial control protocol analysis module establishes a dynamic library and an interface of the dynamic library.

Wherein, the interface is at least used for the industrial control protocol analysis module to query the industrial control protocols currently supported by the feature library for analysis.

Specifically, the dynamic library can reduce memory and page swapping, and the dynamic library is relatively independent. Only changing the feature library will not affect the interface of the dynamic library, that is, when the feature library needs to be reloaded, there will be no impact on the dynamic library. The interface of the library has an impact, reducing the workload caused by loading the feature library.

S302: The dynamic library numbers the industrial control protocols of the feature library.

Among them, in order to facilitate the industrial control protocol analysis module to call the industrial control protocol of the feature library through the interface of the dynamic library to number. That is, the industrial control protocol analysis module numbers the industrial control protocols of the feature library through the interface of the dynamic library, so that the industrial control protocol analysis module can query the industrial control protocol according to the number.

As shown in FIG. 4 , it should be noted that setting the global function pointer of the dynamic library interface includes steps S303 to S304 .

S303: The industrial control protocol parsing module sets the global function pointer to a null value in response to the loading instruction.

Wherein, the global function pointer is used to indicate the interface location of the dynamic library. After the industrial control protocol analysis module loads the instruction, it first sets the global function pointer to a null value, so as to avoid using the original analysis identification code to analyze the industrial control message.

S304: The industrial control protocol analysis module opens the dynamic library according to the system call function of the dynamic library, and reassigns a value to the global function pointer, so that the industrial control protocol analysis module calls the interface of the dynamic library according to the reassigned global function pointer.

Among them, the industrial control protocol analysis module loads the feature library according to the loading instruction. After the loading is completed, it opens a new feature library according to the system call function of the dynamic library, and re-assigns the global function pointer on the basis of assigning a null value to the global function pointer. , complete the action of calling the interface of the dynamic library by the global function pointer, so that the industrial control protocol deep analysis module uses the new interface to process the industrial control message.

S400: The industrial control protocol analysis module analyzes the industrial control message based on the analysis identification code in the feature library.

Among them, after the industrial control protocol analysis module receives the industrial control message forwarding request from the industrial control device, it uses the analysis identification code in the feature library to analyze the industrial control message. When the industrial control message is successfully parsed, it can determine the file to be forwarded by the industrial control device. Whether it can be forwarded.

As shown in FIG. 5 , it should be noted that the industrial control protocol analysis module calls the interface of the dynamic library and returns the analysis result including steps S401 and S402 .

S401: The industrial control protocol analysis module calls the interface of the dynamic library to analyze the industrial control message.

Among them, when the industrial control protocol analysis module receives the industrial control message sent by the industrial control device, it analyzes it through the industrial control protocol analysis module. The industrial control protocol analysis module needs to call the interface of the dynamic library to complete the analysis of the industrial control message. Actions.

S402: The industrial control protocol analysis module receives the analysis result returned by the dynamic library, and the analysis result includes the industrial control protocol number corresponding to the industrial control message, the memory block of the analysis result, and the size of the memory block.

Among them, after the dynamic library receives the industrial control message analysis request sent by the industrial control protocol analysis module, the dynamic library will return the analysis result, which includes the industrial control protocol number, the memory block of the analysis result, and the size of the memory block. The industrial control equipment parses according to the industrial control protocol The analysis result obtained by the module determines whether to continue forwarding the industrial control protocol according to the analysis result.

As shown in Figure 6, for example, the dynamic library will return the parsing result as:

Among them, id indicates the industrial control protocol number, "id": 15 indicates that the industrial control protocol number is 15; result indicates the analysis result, "result": "0x8000000001" indicates that the analysis result is located in the memory block 0x8000000001; result_len indicates the size of the memory block, "result_len" :128 indicates that the size of the memory block is 128.

As shown in Figure 7, it also needs to be explained that the industrial control protocol analysis module sends rule information to the dynamic library through the interface of the dynamic library, so that when the industrial control protocol analysis module sends an industrial control packet analysis request, it can determine whether it matches the rule information and establish a rule The information includes steps S403 and S404.

S403: The industrial control protocol analysis module delivers at least one rule information to the dynamic library through the interface of the dynamic library.

Wherein, each rule information at least includes a rule template name, an industrial control protocol number, the number of target fields, and a matching rule of the target field.

The industrial control protocol analysis module sets the rule information, and saves the rule information in the feature library through the interface. The rule information set by the industrial control protocol analysis module can be understood as the preset rule information, so that when the industrial control protocol analysis module sends a message load , the feature library returns the analysis result, and the industrial control protocol analysis module can compare the analysis result with the preset rule information.

S404: The dynamic library stores the rule information with the same rule template name under the same rule template, so as to obtain the rule chain corresponding to each rule template.

Among them, the dynamic library integrates the industrial control protocol number and fields issued by the industrial control protocol analysis module into a rule information, and then defines the parameters, specifying the meaning of different parameters according to different protocol numbers.

As shown in Figure 6, for example, for the GOOSE protocol, the industrial control protocol number and field contents issued by the industrial control protocol analysis module are:

Among them, template indicates the rule template, "template": "test1" indicates that the rule template is test1; id indicates the industrial control protocol number, "id":15 indicates that the industrial control protocol number is 15; param_cnt indicates the number of target fields, "param_cnt":2 Indicates that the number of target fields is 2; param indicates the target field matching parameter, "param":["abc","123"] indicates that the target field matching parameter gocbref (control block reference name) is abc, and appid (application number) is 123 .

When processing in the dynamic library, the parameter definition for the rule information of the industrial control protocol number 15 is to allow industrial control messages whose gocbref is abc and appid is 123 to be allowed to pass, and other industrial control messages to be rejected.

Each rule information is stored under a rule template, and each rule template can be configured with multiple pieces of rule information. For example, each rule template can be configured with 2000 pieces of rule information, and a total of 16 rule templates can be configured.

As shown in FIG. 8 , the rule information configured in each rule template forms a rule chain. In order to call and match in subsequent steps.

As shown in FIG. 9 , it should be explained finally that if the industrial control protocol deep analysis module needs to control the industrial control protocol, it includes steps S405 and S406 .

S405: The industrial control protocol analysis module calls the interface of the dynamic library to send matching information to the dynamic library.

Wherein, the matching information includes a rule template name and a parsing result. The industrial control protocol analysis module sends a request for matching information to the dynamic library based on the analysis result returned by the dynamic library. The dynamic library returns the analysis result based on the request, and the analysis result can be compared with the preset rule information.

As shown in Figure 6, for example, the industrial control protocol parsing module sends a request for matching information to the dynamic library as follows:

Among them, template means the rule template, "template": "test1" means the rule template is test1; id means the industrial control protocol number, "id":15 means the industrial control protocol number is 15; result means the analysis result, "result": "0x8000000001" Indicates that the analysis result is located in the memory block 0x8000000001; result_len indicates the size of the memory block, and "result_len":128 indicates that the size of the memory block is 128.

S406: The dynamic library determines the target rule template according to the name of the rule template, traverses the rule chain of the target rule template to match the analysis result, and forwards or discards the industrial control message according to the matching result.

Among them, the dynamic library first determines the industrial control protocol analysis module according to the analysis result returned by the dynamic library, and then sends the target rule template contained in the matching information to the dynamic library, traverses the rule chain under the target rule template, and matches the results, if the match is successful It is considered that the rule information exists to allow forwarding, otherwise it returns a rejection.

S500: The industrial control device controls the industrial control message according to the analysis result of the industrial control message.

Wherein, the industrial control protocol analysis module feeds back the analysis result of the industrial control message to the industrial control equipment, and the industrial control equipment controls the industrial control message according to the feedback analysis result, and the control includes continuing to forward or stop forwarding.

As shown in Figure 6 and Figure 8, in summary, the present application provides a hot-loading industrial control protocol analysis and control method, which obtains a feature library packaged with analytic identification codes of multiple industrial control protocols, and the dynamic library supports the feature library. Each industrial control protocol is numbered and an interface is provided for the industrial control protocol analysis module to query the types of protocols currently supported.

After the industrial control protocol analysis module receives the signal, all the interfaces are vacated to prevent the use of the old interface (set the global function pointer to be empty).

Open the newly loaded feature library, use the system call function of the dynamic library to open the dynamic library, and reassign the global function pointer. The industrial control protocol analysis module can use the new interface to process the industrial control message.

The industrial control protocol parsing module establishes rule information, and the rule information includes at least the rule template name, the industrial control protocol number, the number of target fields, and the matching rules of the target fields.

Send the rule information to the dynamic library and store it in the feature library. The feature library classifies and stores the rule information issued by the industrial control protocol analysis module. The rule information with the same rule template name is stored under the same rule template. rule information to form a rule chain, when a rule needs to be used, just traverse the rule chain of the rule template.

When the industrial control device wants to forward the industrial control message, it needs to analyze the industrial control message. In this case, the industrial control device first sends the industrial control message to the industrial control protocol analysis module, and then the industrial control protocol analysis module sends the industrial control message load to the dynamic library, and finally The industrial control message is analyzed by the feature library, and the analysis result is returned to the industrial control protocol analysis module. The analysis result includes the protocol number, the memory address and memory size containing the analysis result.

The industrial control protocol analysis module matches the analysis result of the industrial control message with the rule information preset in the feature library. It should be noted that the analysis result sent by the industrial control protocol analysis module to the feature library includes the rule template name , protocol number, number of fields, and field content, where the field content is a string. That is to say, the content of the analysis result sent by the industrial control protocol analysis module to the feature library is not exactly the same as the content of the analysis result returned by the feature library to the industrial control protocol analysis module.

When the dynamic library receives the parsing result containing the template name, protocol number, field number and field content sent by the industrial control protocol parsing module, it will first match the rule template. After the rule template is successfully matched, the protocol number and field number To match the rule chain under the rule template, the dynamic library will traverse the rule chain of the rule template to match the protocol number and the number of fields. After the match is successful, the field content can be forwarded.

According to the analysis result of the industrial control message, the industrial control equipment realizes the control of the industrial control message, such as forwarding or discarding and other control actions.

The industrial control protocol analysis module opens the dynamic library file of the preset target path, loads the interface functions to be used, and needs to have corresponding functions. Specifically, the interface functions of the industrial control protocol analysis module in Figure 9 use icf_show_proto, icf_proto_parse, icf_proto_match and icf_proto_set_rule respectively express.

Among them, icf_show_proto displays the list of currently supported industrial control protocols, and the returned content includes the protocol number and rule template name.

The input parameter of icf_proto_parse is the payload of the industrial control message, and the returned result is the protocol number, the memory address and memory size including the parsed result.

The input parameter of icf_proto_match is the analysis result returned by icf_proto_parse and the name of the rule template to be matched, and returns the forwarding status of the industrial control message (allow or deny).

The input parameters of icf_proto_set_rule are rule template name, protocol number, number of fields and field content, where the field content is a string.

It should be noted that the timing of icf_proto_set_rule and icf_proto_parse in Figure 6 can be interchanged.

Based on the above content, the dynamic library parses the industrial control message load, obtains the fields that need to be controlled, saves the field values in the memory block, and returns the memory address and memory block plus the protocol number to the industrial control protocol analysis module. The fields that need to be controlled and the fields in the rule information need to correspond. This logic is set in the dynamic library, and the industrial control protocol analysis module will abstract this logic into parameters.

In this embodiment, when the industrial control device sends and receives the industrial control message, the industrial control message may be sent by other devices. In this case, it is necessary to analyze the industrial control message before it can be recognized by the industrial control device. Analyze the function of industrial control messages. Since there are many types of industrial control protocols, and the time is accompanied by the update of the industrial control protocol, if the analysis identification code of the industrial control protocol is compiled into the industrial control protocol analysis module, in this case, the analysis identification code will be fixed in the industrial control protocol analysis module. When faced with a new industrial control protocol, the code in the entire industrial control protocol analysis module needs to be modified, and the analysis module or system needs to be restarted, and even the image of the device needs to be replaced.

Based on the above reasons, the feature library encapsulated with the analysis identification code of the industrial control protocol is uploaded to the industrial control equipment, and then the industrial control protocol analysis module uses the dynamic library to call the analysis identification code of the industrial control protocol in the feature library, and the analysis of the industrial control protocol can also be realized , and when the analysis identification code of the industrial control protocol needs to be updated or added, just load a new feature library. In addition, the interface of the dynamic library does not change the internal name, parameters, return value type and calling convention of the dynamic library by the industrial control protocol analysis module, so the interface of the dynamic library does not need to be changed, only the global function pointer needs to be assigned a null value , to prevent the industrial control message from calling the old interface. After the feature library is loaded, just reassign the global function pointer. There is no need to restart the analysis module or restart the system, and there is no need to replace the image of the device, which realizes the analysis and control of the hot loading industrial control protocol.

The second aspect of the present application provides a system for analyzing and controlling a hot-loading industrial control protocol, including any one of the aforementioned methods for analyzing and controlling a hot-loading industrial control protocol, including:

The acquiring unit is used to acquire the feature library, wherein the feature library is encapsulated with the analysis identification code of the industrial control protocol;

The transmission unit is used to upload the feature library to the industrial control device according to the preset target path, and send a loading instruction to the industrial control device, wherein the industrial control device includes an industrial control protocol analysis module;

The response unit is used for the industrial control protocol analysis module to load the feature library from the target path in response to the loading instruction;

The identification unit is used for the industrial control protocol analysis module to analyze the industrial control message based on the analysis identification code in the feature library;

The control unit is used for the industrial control equipment to control the industrial control message according to the analysis result of the industrial control message.

The third aspect of the present application provides an electronic device, including:

processor;

memory for storing processor-executable instructions;

The processor is used to read executable instructions from the memory, and execute the instructions to implement the aforementioned method for analyzing and controlling the hot loading industrial control protocol.

The fourth aspect of the present application provides a computer-readable storage medium, on which computer program instructions are stored, which is characterized in that, when the program instructions are executed by the processor, the steps of the aforementioned method for analyzing and controlling the hot loading industrial control protocol are implemented .

The above examples only express the specific implementation manner of the present invention, and the description thereof is relatively specific and detailed, but should not be construed as limiting the patent scope of the present invention. It should be pointed out that those skilled in the art can make several modifications and improvements without departing from the concept of the present invention, and these all belong to the protection scope of the present invention.

Claims (10)

1. A method for analyzing and controlling a hot-loading industrial control protocol is characterized by comprising the following steps:

acquiring a feature library, wherein the feature library is encapsulated with an analysis identification code of an industrial control protocol;

uploading the feature library to industrial control equipment according to a preset target path, and sending a loading instruction to the industrial control equipment, wherein the industrial control equipment comprises an industrial control protocol analysis module;

the industrial control protocol analysis module responds to the loading instruction and loads the feature library from the target path;

the industrial control protocol analysis module analyzes the industrial control message based on the analysis identification code in the feature library;

and the industrial control equipment controls the industrial control message according to the analysis result of the industrial control message.

2. The method for hot-loading industrial control protocol parsing and controlling according to claim 1, wherein the step of loading the feature library from the target path by the industrial control protocol parsing module in response to the load instruction comprises:

the industrial control protocol analysis module establishes a dynamic library and an interface of the dynamic library, wherein the interface is at least used for the industrial control protocol analysis module to inquire the industrial control protocol currently supporting analysis of the feature library;

and the dynamic library numbers the industrial control protocol of the feature library.

3. The method for analyzing and controlling the hot-loading industrial control protocol according to claim 1, wherein the step of uploading the feature library to the industrial control equipment according to a preset target path and sending a loading instruction to the industrial control equipment comprises:

based on a transmission mode of http or ftp, uploading the feature library to the industrial control equipment through the target path;

and sending a loading instruction to the industrial control protocol analysis module.

4. The method of hot-load industrial control protocol parsing and control according to claim 2, wherein the step of loading the feature library from the target path by the industrial control protocol parsing module in response to the load instruction comprises:

the industrial control protocol analysis module responds to the loading instruction and sets a global function pointer to a null value, wherein the global function pointer is used for indicating the interface position of the dynamic library;

and the industrial control protocol analysis module opens the dynamic library according to the system call function of the dynamic library and assigns the global function pointer again so that the industrial control protocol analysis module calls the interface of the dynamic library according to the global function pointer assigned again.

5. The method for analyzing and controlling the hot-loading industrial control protocol according to claim 2, wherein the step of analyzing the industrial control message by the industrial control protocol analysis module based on the analysis identification code in the feature library comprises:

the industrial control protocol analysis module calls an interface of the dynamic library to analyze the industrial control message;

and the industrial control protocol analysis module receives the analysis result returned by the dynamic library, wherein the analysis result comprises an industrial control protocol number corresponding to the industrial control message, an analysis result memory block and the size of the memory block.

6. The method for parsing and controlling a hot-loading industrial control protocol according to claim 5, wherein the step of parsing the industrial control message by the industrial control protocol parsing module based on the parsing identification code in the feature library further comprises:

the industrial control protocol analysis module issues at least one piece of rule information to the dynamic library through an interface of the dynamic library, wherein each piece of rule information at least comprises a rule template name, an industrial control protocol number, the number of target fields and a matching rule of the target fields;

and the dynamic library stores the rule information with the same rule template name in the same rule template so as to obtain a rule chain corresponding to each rule template.

7. The method for parsing and controlling a hot-loading industrial control protocol according to claim 6, wherein the step of parsing the industrial control message by the industrial control protocol parsing module based on the parsing identification code in the feature library comprises:

the industrial control protocol analysis module calls an interface of the dynamic library to send matching information to the dynamic library, wherein the matching information comprises a rule template name and the analysis result;

and the dynamic library determines a target rule template according to the rule template name, traverses a rule chain of the target rule template to match the analysis result, and forwards or discards the industrial control message according to the matching result.

8. A system for parsing and controlling a thermal load industrial control protocol, comprising a method for parsing and controlling a thermal load industrial control protocol according to any one of claims 1-7, comprising:

the system comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring a feature library, and the feature library is internally packaged with analysis identification codes of industrial control protocols;

the transmission unit is used for uploading the feature library to industrial control equipment according to a preset target path and sending a loading instruction to the industrial control equipment, wherein the industrial control equipment comprises an industrial control protocol analysis module;

the response unit is used for responding to the loading instruction by the industrial control protocol analysis module and loading the feature library from the target path;

the identification unit is used for analyzing the industrial control message by the industrial control protocol analysis module based on the analysis identification code in the feature library;

and the control unit is used for controlling the industrial control message by the industrial control equipment according to the analysis result of the industrial control message.

9. An electronic device, comprising:

a processor;

a memory for storing the processor-executable instructions;

the processor is used for reading the executable instructions from the memory and executing the instructions to realize the method for analyzing and controlling the hot-loading industrial control protocol according to any one of claims 1 to 7.

10. A computer readable storage medium having stored thereon computer program instructions, which when executed by a processor, perform the steps of the method for hot-load industrial control protocol parsing and control according to any of claims 1-7.

Images