[go: up one dir, main page]

CN116107271B - Industrial operation safety control method, device, electronic equipment and storage medium - Google Patents

Industrial operation safety control method, device, electronic equipment and storage medium

Info

Publication number
CN116107271B
CN116107271B CN202111335661.6A CN202111335661A CN116107271B CN 116107271 B CN116107271 B CN 116107271B CN 202111335661 A CN202111335661 A CN 202111335661A CN 116107271 B CN116107271 B CN 116107271B
Authority
CN
China
Prior art keywords
sequence
industrial
dimension
control service
sequences
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111335661.6A
Other languages
Chinese (zh)
Other versions
CN116107271A (en
Inventor
梁一
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Secworld Information Technology Beijing Co Ltd
Qax Technology Group Inc
Original Assignee
Secworld Information Technology Beijing Co Ltd
Qax Technology Group Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Secworld Information Technology Beijing Co Ltd, Qax Technology Group Inc filed Critical Secworld Information Technology Beijing Co Ltd
Priority to CN202111335661.6A priority Critical patent/CN116107271B/en
Publication of CN116107271A publication Critical patent/CN116107271A/en
Application granted granted Critical
Publication of CN116107271B publication Critical patent/CN116107271B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/41875Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by quality surveillance of production
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/30Nc systems
    • G05B2219/32Operator till task planning
    • G05B2219/32252Scheduling production, machining, job shop
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02PCLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
    • Y02P90/00Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
    • Y02P90/02Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Manufacturing & Machinery (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Numerical Control (AREA)
  • Safety Devices In Control Systems (AREA)

Abstract

The application provides a safety control method, a device, electronic equipment and a storage medium for industrial operation, wherein the method comprises the steps of caching industrial operation instructions received according to time sequence to obtain a plurality of industrial control service sequences with different dimensions, comparing the industrial control service sequences with the same dimension with the standard operation sequences according to known standard operation sequences with different dimensions to determine whether the industrial control service sequences are matched with the standard operation sequences, and if the industrial control service sequences with any dimension are not matched with the standard operation sequences, performing safety control operation. The method is used for checking the more complex industrial operation, thereby avoiding the more complex illegal or illegal industrial operation from being executed and improving the safety of industrial production.

Description

Security control method and device for industrial operation, electronic equipment and storage medium
Technical Field
The present application relates to the field of industrial safety control, and in particular, to a safety control method and apparatus for industrial operation, an electronic device, and a storage medium.
Background
With the continuous development of internet technology and industrial control, security control technology is increasingly adopted in industrial production. In the prior art, mainly aiming at the study of whether a single instruction is in compliance or not, when a certain instruction is not in compliance, an alarm is given.
However, in the prior art, only whether a single instruction is qualified or not can be judged, and whether a second instruction can be executed or not cannot be known after the first instruction is executed, for example, if the gas a cannot be flushed, the gas b cannot be flushed after the gas a is flushed, and each instruction is qualified based on the judgment of the single instruction, so that reasonable analysis and control cannot be performed on the single instruction.
Disclosure of Invention
The embodiment of the application provides a safety control method for industrial operation, which is used for improving the accuracy of dangerous operation identification and improving the safety of the industrial operation.
A first aspect of an embodiment of the present application provides a safety control method for an industrial operation, including:
Caching industrial operation instructions received according to time sequence to obtain a plurality of industrial control service sequences with different dimensions;
According to known standard operation sequences with different dimensions, comparing the industrial control service sequence with the standard operation sequence with the same dimension, and determining whether the industrial control service sequence is matched with the standard operation sequence;
and if the industrial control service sequence of any dimension is not matched with the standard operation sequence, performing safety control operation.
In an embodiment, the comparing the industrial control service sequence of the same dimension with the standard operation sequence according to the known standard operation sequence of different dimensions includes:
According to the known standard operation sequences with different dimensions, comparing each industrial operation instruction of the industrial control service sequence with the same dimension with the standard operation sequence with the same dimension one by one in sequence aiming at each dimension;
if the operation sequence is consistent with any standard operation sequence, the industrial control service sequence is matched with the standard operation sequence, and if the operation sequence is inconsistent with any standard operation sequence, the industrial control service sequence is not matched with the standard operation sequence.
In an embodiment, the caching the industrial operation instruction received according to the time sequence to obtain a plurality of industrial control service sequences with different dimensions includes:
And according to the address information of each working operation instruction, the working operation instructions with the same address information are orderly arranged according to the receiving sequence to obtain the industrial control service sequences with different dimensions corresponding to the address information.
In an embodiment, the comparing the industrial control service sequence of the same dimension with the standard operation sequence according to the known standard operation sequence of different dimensions includes:
And for each dimension, according to the standard operation sequence of the dimension corresponding to the address information, sequentially comparing the industrial control service sequence of the dimension corresponding to the address information with the standard operation sequence of the dimension corresponding to the address information one by one.
In an embodiment, if the industrial control service sequence of any dimension is not matched with the standard operation sequence, performing a safety control operation includes:
and if the industrial control service sequence of any dimension is not matched with the standard operation sequence, carrying out alarm prompt and blocking the issuing of the industrial operation instruction.
In an embodiment, the caching the industrial operation instruction received according to the time sequence to obtain a plurality of industrial control service sequences with different dimensions includes:
And responding to an opening instruction of a specified sequence mode, and sequentially extracting a target operation instruction from the received industrial operation instruction according to the specified sequence mode to obtain the industrial control service sequences with different dimensions.
In an embodiment, the specified sequence pattern includes any one of an operation serialization pattern, a parameter serialization pattern, and an operation parameter combination serialization pattern.
In an embodiment, before the comparing the industrial control service sequence of the same dimension with the standard operation sequence according to the known standard operation sequence of different dimensions, the method further includes:
And according to the preset sequence analysis dimension, extracting industrial operation instructions in a normal running state, and sequentially arranging to obtain a plurality of standard operation sequences with different dimensions.
In an embodiment, further comprising:
And storing a plurality of standard operation sequences with different dimensions into a database, and stopping the extraction of the standard operation sequences until a stopping condition is met.
In an embodiment, the stop condition includes any one of three stop conditions that the number of repetitions of each standard operation sequence exceeds a first threshold, that the time without a newly added standard operation sequence exceeds a second threshold, and that the total extraction duration exceeds a third threshold.
The embodiment of the application provides a safety control device for industrial operation, which comprises the following components:
The instruction caching module is used for caching the industrial operation instructions received according to the time sequence to obtain a plurality of industrial control service sequences with different dimensions;
The sequence comparison module is used for comparing the industrial control service sequence with the standard operation sequence of the same dimension according to the known standard operation sequences of different dimensions, and determining whether the industrial control service sequence is matched with the standard operation sequence;
and the safety control module is used for carrying out safety control operation if the industrial control service sequence of any dimension is not matched with the standard operation sequence.
A third aspect of an embodiment of the present application provides an electronic device, including:
a processor;
a memory for storing processor-executable instructions;
Wherein the processor is configured to perform the method of the first aspect of the embodiments of the application and any of the embodiments thereof.
A fourth aspect of the embodiments of the present application provides a computer readable storage medium storing a computer program executable by a processor to perform the method of the first aspect of the embodiments of the present application and any of the embodiments thereof.
The industrial operation safety control method, the industrial operation safety control device, the electronic equipment and the storage medium are mainly applied to industrial production, can learn the cascade relation of the industrial operation in industrial control, match the received industrial control service sequence with the standard service sequence, and can analyze, alarm and block illegal and non-compliant behaviors in the industrial operation process according to the matching result. The technical scheme of the application provides richer safety guarantee for the process of industrial control service flow, can improve the accuracy of dangerous operation identification and improves the safety of industrial operation.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are needed in the embodiments will be briefly described below, it being understood that the following drawings only illustrate some embodiments of the present application and therefore should not be considered as limiting the scope, and other related drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is an application scenario schematic diagram of an industrial operation safety control method provided by an embodiment of the present application;
fig. 2 is a schematic structural diagram of an electronic device according to an embodiment of the present application;
FIG. 3 is a flow chart of a method for controlling safety of industrial operations according to an embodiment of the present application;
FIG. 4 is a flow chart of a method for controlling safety of industrial operations according to another embodiment of the present application;
FIG. 5 is a flowchart illustrating a standard operation sequence learning process according to an embodiment of the present application;
FIG. 6 is a schematic diagram of an industrial operation sequence and a standard operation sequence according to an embodiment of the present application;
Fig. 7 is a schematic structural diagram of an industrial operation safety control device according to an embodiment of the present application.
Detailed Description
In the description of the present application, the terms "first," "second," and the like are used merely for distinguishing between descriptions, and do not denote a ordinal number, nor are they to be construed as indicating or implying relative importance.
In the description of the present application, the terms "comprises," "comprising," and the like, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, elements, components, and/or groups thereof.
The technical solutions of the present application will be clearly and completely described below with reference to the accompanying drawings.
Fig. 1 is a schematic application view of a safety control method for industrial operations according to an embodiment of the application. The application scenario comprises a first terminal 101, a second terminal 102 and an industrial device 103, the second terminal 102 being connected to the first terminal 101 and the industrial device 103, respectively. The first terminal 101 may be a desktop computer or a notebook computer. The second terminal 102 may be a controller. The first terminal 101 is configured to send an industrial operation instruction to the second terminal 102, where the second terminal 102 may execute the method provided by the embodiment of the present application to perform safety control of industrial operation, and determine whether to issue the industrial operation instruction to the industrial device 103.
Fig. 2 is a schematic structural diagram of an electronic device 200 according to an embodiment of the application, and the electronic device 200 may be used to execute the security control method for industrial operations according to the embodiment of the application. The electronic device 200 comprises at least one processor 203, at least one memory 202 and a bus 201, the bus 201 being used to enable connected communication of these components. The electronic device 200 may be a host computer, a tablet computer, etc., for performing a security control method of an industrial operation.
In one embodiment, memory 202 may be implemented by any type of volatile or non-volatile Memory device or combination thereof, including, but not limited to, random access Memory (Random Access Memory, RAM), read Only Memory (ROM), static random access Memory (Static Random Access Memory, SRAM), programmable Read Only Memory (Programmable Read-Only Memory, PROM), erasable Read Only Memory (Erasable Programmable Read-Only Memory, EPROM), electrically erasable Read Only Memory (Electric Erasable Programmable Read-Only Memory, EEPROM).
In one embodiment, the Processor 203 may be a general purpose Processor including, but not limited to, a central processing unit (Central Processing Unit, CPU), a network Processor (Network Processor, NP), etc., a digital signal Processor (DIGITAL SIGNAL Processor, DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf programmable gate array (Field Programmable GATE ARRAY, FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, etc. A general purpose processor may be a microprocessor or the processor 203 may be any conventional processor or the like, the processor 203 being a control center of the electronic device 200, with various interfaces and lines connecting various portions of the entire electronic device 200. The processor 203 may implement or perform the methods, steps, and logic blocks disclosed in embodiments of the present application.
In an embodiment, fig. 2 illustrates a processor 203 and a memory 202, where the processor 203 and the memory 202 are connected through a bus 201, and the memory 202 stores instructions executable by the processor 203, so that the electronic device 200 can execute all or part of the methods in the following embodiments to implement safety control over industrial operations.
Referring to fig. 3, a flowchart of a method for controlling safety of an industrial operation according to an embodiment of the application is shown, and the method can be performed by the electronic device 200 shown in fig. 2, and the method includes S310-S330.
And S310, caching the industrial operation instructions received according to the time sequence to obtain industrial control service sequences with different dimensions.
In industrial production, the second terminal receives industrial operation instructions to the industrial equipment issued by the first terminal, and in the step, the industrial operation instructions are sequentially stored according to time sequence, and the industrial control service sequence is obtained by time sequence arrangement storage. According to the preset sequence analysis dimension, assuming that the preset sequence analysis dimension is 5 dimensions, the industrial control service sequences can have 1 dimension, 2 dimensions, 3 dimensions, 4 dimensions and 5 dimensions, and are provided for industrial control service sequences with 5 different dimensions. Wherein, 1 dimension indicates that industrial control service sequence contains an industrial operation instruction. The 2-dimensional representation industrial control service sequence contains two continuous industrial operation instructions and so on.
In an embodiment, according to the address information of each working operation instruction, the working operation instructions with the same address information are sequentially arranged according to the receiving sequence to obtain the industrial control service sequences with different dimensions corresponding to the address information.
The address information includes a source address and a destination address. The industrial operation instruction comprises a source address, a destination address and operation content, wherein the source address is a terminal address for sending the operation instruction, the destination address is an equipment address for finally executing the operation, and the operation content is specific operation needed to be performed by the equipment.
When the working operation instructions are arranged, the working operation instructions containing the same address information are arranged and cached according to the time sequence, so that industrial control service sequences with different dimensions and the same address information are obtained.
In an embodiment, the second terminal responds to the start instruction of the specified sequence mode, and can sequentially extract the target operation instruction from the received industrial operation instruction according to the specified sequence mode to obtain industrial control service sequences of different dimensions.
Wherein the specified sequence pattern may include any one of an operation serialization pattern, a parameter serialization pattern, and an operation parameter combination serialization pattern.
Each mode includes a source address, a destination address, and operation content. Wherein the operation content of the operation serialization mode comprises different operation actions on the device, the operation content of the parameter serialization mode comprises different parameter values under the same operation action on the device, and the operation content of the operation parameter combination serialization mode comprises different parameter values for different operations.
For example, the operation serialization mode may be a source address, a destination address, operation a, a source address, a destination address, operation b, a source address, a destination address, operation c.
The parameter serialization mode may be a source address, a destination address, an operation a, a value x, a source address, a destination address, an operation a, a value y, a source address, a destination address, an operation a, a value z..
The operation parameter combination serialization mode may be a source address, a destination address, (operation a, value x), a source address, a destination address, (operation b, value y), a source address, a destination address, (operation c, value z).
When a user turns on a switch of a certain sequence mode, the second terminal receives an on instruction of the appointed sequence mode, and the second terminal extracts all industrial operation instructions of the certain sequence mode appointed by the user from all the received industrial operation instructions to obtain industrial control service sequences of different dimensions.
S320, comparing the industrial control service sequence with the standard operation sequence of the same dimension according to the known standard operation sequences of different dimensions, and determining whether the industrial control service sequence is matched with the standard operation sequence.
In the learning stage, an industrial control service sequence formed by operation instructions capable of enabling the equipment to normally operate can be prestored in a database and is called a standard operation sequence. The standard operation sequence can also have different dimensions, and the preset sequence analysis dimension is 5 dimensions, so that the standard operation sequence can have a plurality of standard operation sequences with different dimensions such as 1 dimension, 2 dimensions, 3 dimensions, 4 dimensions, 5 dimensions and the like. After the industrial control service sequences with different dimensions are obtained in S310, a one-dimensional industrial control service sequence can be compared with a pre-stored one-dimensional standard operation sequence to determine whether the industrial control service sequences are matched, a two-dimensional industrial control service sequence is compared with a two-dimensional standard operation sequence to determine whether the industrial control service sequences are matched, a three-dimensional industrial control service sequence is compared with a three-dimensional standard operation sequence to determine whether the industrial control service sequences are matched, and so on.
S330, if the industrial control service sequence of any dimension is not matched with the standard operation sequence, safety control operation is carried out.
The safety control operation can be to carry out alarm prompt or to block the issuing of industrial operation instructions. In an embodiment, if the industrial control service sequence of a certain dimension is not matched with the standard operation sequence, the second terminal carries out alarm prompt and blocks the issuing of the industrial operation instruction, thereby avoiding the equipment from executing the operation instruction.
When the industrial control service sequence of each dimension is found to be matched with the standard operation sequence, the second terminal can issue the industrial control service sequence to industrial equipment.
According to the industrial operation safety control method provided by the embodiment, industrial operation instructions with the same address are sequentially cached to obtain industrial control service sequences with different dimensions, the industrial control service sequences with different dimensions are arranged according to the receiving sequence, whether the industrial control service sequences with different dimensions accord with standard service sequences with different dimensions or not is compared, and if the industrial control service sequences with different dimensions do not accord with the standard, alarm prompt is carried out. The method judges the more complex industrial operation flow, thereby avoiding the more complex illegal or illegal industrial operation from being executed and improving the safety of industrial production.
Referring to fig. 4, a flowchart of a method for controlling safety of an industrial operation according to another embodiment of the application is shown, which can be executed by the electronic device 200 shown in fig. 2, and the method includes S410-S450.
S410, analyzing the dimension according to a preset sequence, extracting industrial operation instructions in a normal running state, and sequentially arranging the industrial operation instructions to obtain a plurality of standard operation sequences with different dimensions.
The sequence analysis dimension refers to the maximum dimension of the recorded and analyzed industrial control service sequence and standard operation sequence. The dimension is the number of industrial operation instructions contained in the industrial control service sequence and the standard operation sequence. A standard sequence of operations refers to a sequence of operations that may cause the device to function properly. In the learning stage, firstly, flow analysis is carried out, instruction transmission is based on https protocol, and the content of an operation instruction is obtained by analyzing protocol rules. And then storing a standard operation sequence which contains a specified operation instruction number and can enable the equipment to normally operate. Assuming the sequence analysis dimension is 5 dimensions, the standard sequence of operations may have 1,2,3, 4, and 5 dimensions.
The process of learning the industrial control flow sequence is shown in fig. 5. Learning is performed in an initial stage according to a learning dimension set by a user, for example, the set sequence analysis dimension is N-dimension. Firstly, carrying out one-dimensional analysis on each received industrial operation instruction (namely whether each industrial operation instruction exists in a database or not), if the database exists in the one-dimensional sequence, carrying out two-dimensional analysis (namely whether any two continuous industrial operation instructions exist in the database or not), if the database does not exist, recording the one-dimensional sequence, carrying out three-dimensional analysis on the database after the one-dimensional sequence is recorded, if the database does not exist in the two-dimensional sequence, and if the database does not exist in the two-dimensional sequence, carrying out three-dimensional analysis (namely whether any three continuous industrial operation instructions exist in the database or not). Similarly, N dimensions are analyzed, the N dimension sequence exists, the N dimension sequence learning is completed, and if the N dimension sequence does not exist, a new N dimension sequence is recorded in a database.
In one embodiment, a plurality of standard operation sequences of different dimensions are stored in the database, and extraction of the standard operation sequences is not stopped until a stop condition is satisfied.
In one embodiment, the stop condition includes any one of three stop conditions that the number of repetitions of each standard operation sequence exceeds a first threshold, that the time without a newly added standard operation sequence exceeds a second threshold, and that the total extraction duration exceeds a third threshold.
In the learning stage, when the standard operation sequence meeting the preset dimension of the user is stored in the database, the standard operation sequence can be stored in the database after meeting the stop condition.
The maximum number of repetitions of each standard sequence of operations stored in the database may be set, defined as a first threshold, the time at which the standard sequence of operations is no longer stored in the database is defined as a second threshold, and the total duration of the standard sequence of operations is stored in the database is defined as a third threshold.
The stop condition includes the number of repetitions of each standard operation sequence exceeding a first threshold, the time without a newly added standard operation sequence exceeding a second threshold, and the total extraction duration exceeding a third threshold. Extraction of the standard sequence of operations may be stopped as long as one of the three stop conditions is satisfied.
In one embodiment, the dimension of the sequence may be changed according to the needs of the user, including dimension-down control and dimension-up control. When the user wants to reduce the dimension of the operation sequence, deleting the corresponding high-dimensional operation sequence. For example, if the three-dimensional operation sequence is changed to the two-dimensional operation sequence, the three-dimensional operation sequence of the database is deleted.
When the user wants to increase the dimension of the operation sequence, the database can be expanded, and the sequence information corresponding to the high dimension is increased. For example, the two-dimensional operation sequence is changed into the three-dimensional operation sequence, the optimization database is expanded first, the sequence condition is re-analyzed from all sequences in the original database, and the needed high-dimensional sequence is generated. The larger the data volume, the higher the dimension, and the longer the time required for generation. Therefore, when changing the dimension of the sequence, different dimension upper limits are defined and whether to start is determined according to the operation and storage capability of different devices.
And S420, caching the industrial operation instructions received according to the time sequence to obtain industrial control service sequences with different dimensions. Refer to step S310 of the above embodiment.
S430, according to the known standard operation sequences with different dimensions, comparing each industrial operation instruction of the industrial control service sequence with the same dimension with the standard operation sequence with the same dimension one by one in sequence.
In an embodiment, for each dimension, according to the standard operation sequence of the dimension corresponding to the address information, the industrial control service sequence of the dimension corresponding to the address information and the standard operation sequence of the dimension corresponding to the address information may be compared sequentially one by one.
The address information includes source and destination addresses, i.e., sender and receiver addresses of the industrial operation instructions. The number of industrial equipment is more than one, and the industrial control service sequence and the standard operation sequence which participate in comparison are required to ensure that the address information is the same, and are sequences formed by the industrial operation instructions of the same upstream terminal to the same downstream industrial equipment. When determining whether an industrial control service sequence of a certain dimension is matched with a standard operation sequence of the same dimension, whether the industrial control service sequence is consistent with each working operation instruction contained in the standard operation sequence or not needs to be compared, wherein the content of the working operation instruction and the sequence in the sequence are included. The contents of the work operation instruction include address information.
S440, if the industrial control service sequence of any dimension is consistent with any standard operation sequence of the same dimension, the industrial control service sequence of the dimension is matched with the standard operation sequence of the dimension, S450, if the industrial control service sequence of any dimension is inconsistent with any standard operation sequence of the same dimension, the industrial control service sequence of the dimension is not matched with the standard operation sequence of the dimension.
And S460, if the industrial control service sequence of any dimension is not matched with the standard operation sequence, performing safety control operation.
As shown in FIG. 6, when a plurality of industrial control service sequences with different dimensions exist, searching and matching of one-dimensional sequences can be performed first, alarm blocking is performed if matching is unsuccessful, matching is successful, searching and matching of two-dimensional sequences are performed again, alarm blocking is performed if matching is unsuccessful, matching is successful, searching and matching of three-dimensional sequences are performed, and similarly, searching and matching of N-dimensional sequences are performed, and matching is successful, and verification is considered to be passed, and then the industrial equipment downstream is issued.
When the prompting, alarming and blocking operations occur, the user manually verifies that the operation sequences are compliant sequences, and the operation sequences can be stored in the database as standard operation sequences. For the scene needing to be safely controlled, a serialization automatic editing scheme can be added, so that not only can the rule of adding the current state be refreshed, but also the sequence rule of the adjacent state can be added and refreshed. For example, when a whitening operation is required for the alarm, i.e. the industrial control white list is added, the standard operation sequence is considered, for example, for ABDEXY sequences, if an E instruction appears for the alarm, when the sequence analysis dimension is 3 dimensions, BDE, DEX, EXY, DE, EX and E can be added into a database as the standard operation sequence.
Fig. 7 is a schematic structural diagram of an industrial safety control device according to an embodiment of the application. As shown in fig. 7, the safety control device 700 for industrial operation may include:
the instruction caching module 710 is configured to cache the industrial operation instructions received according to the time sequence, so as to obtain an industrial control service sequence;
a sequence comparison module 720, configured to compare the industrial control service sequence with the standard operation sequence according to a known standard operation sequence, and determine whether the industrial control service sequence is matched with the standard operation sequence;
and the safety control module 730 is configured to perform a safety control operation if the industrial control service sequence is not matched with the standard operation sequence.
The implementation process of the functions and roles of each module in the above device is specifically shown in the implementation process of the corresponding steps in the safety control method of the industrial operation, and will not be described herein again.
An embodiment of the present application also provides a storage medium including a program that, when executed by the electronic device 200, causes the electronic device 200 to perform all or part of the flow of the method in the above embodiment. The storage medium may be a magnetic disk, an optical disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a Flash Memory (Flash Memory), a hard disk (HARD DISK DRIVE, HDD), or a Solid state disk (Solid-state-STATE DRIVE, SSD), etc. The storage medium may also comprise a combination of memories of the kind described above.
The functions, if implemented in the form of software functional modules and sold or used as a stand-alone product, may be stored on a computer readable storage medium. Based on this understanding, the technical solution of the present application may be embodied essentially or in a part contributing to the prior art or in a part of the technical solution in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) to perform all or part of the steps of the method of the embodiments of the present application. The storage medium includes a U disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, an optical disk, or other various media capable of storing program codes.
In the several embodiments provided in the present application, the disclosed apparatus and method may be implemented in other manners. The apparatus embodiments described above are merely illustrative, for example, of the flowcharts and block diagrams in the figures that illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present application. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
In addition, functional modules in the embodiments of the present application may be integrated together to form a single part, or each module may exist alone, or two or more modules may be integrated to form a single part.
The above description is only of the preferred embodiments of the present application and is not intended to limit the present application, but various modifications and variations can be made to the present application by those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the protection scope of the present application.

Claims (13)

1. A method of controlling safety of an industrial operation, comprising:
Caching the industrial operation instructions received according to the time sequence to obtain a plurality of industrial operation sequences with different dimensions, wherein the dimensions refer to the number of the industrial operation instructions contained in the industrial operation sequences, and the plurality of industrial operation sequences with different dimensions refer to the different numbers of the industrial operation instructions contained in each industrial operation sequence in the plurality of industrial operation sequences;
According to known standard operation sequences with different dimensions, comparing the industrial control service sequence with the standard operation sequence with the same dimension, and determining whether the industrial control service sequence is matched with the standard operation sequence;
and if the industrial control service sequence of any dimension is not matched with the standard operation sequence, performing safety control operation.
2. The method of claim 1, wherein the comparing the industrial control service sequence of the same dimension with the standard operation sequence according to the known standard operation sequence of different dimensions to determine whether the industrial control service sequence matches the standard operation sequence comprises:
According to the known standard operation sequences with different dimensions, comparing each industrial operation instruction of the industrial control service sequence with the same dimension with the standard operation sequence with the same dimension one by one in sequence aiming at each dimension;
if the industrial control service sequence of any one dimension is inconsistent with any one standard operation sequence of the same dimension, the industrial control service sequence of the dimension is not matched with the standard operation sequence of the dimension, and if the industrial control service sequence of any one dimension is inconsistent with any one standard operation sequence of the same dimension, the industrial control service sequence of the dimension is not matched with the standard operation sequence of the dimension.
3. The method of claim 1, wherein the caching the industrial operation instructions received in chronological order to obtain a plurality of industrial control service sequences of different dimensions comprises:
And according to the address information of each working operation instruction, the working operation instructions with the same address information are orderly arranged according to the receiving sequence to obtain the industrial control service sequences with different dimensions corresponding to the address information.
4. A method according to claim 3, wherein said comparing the industrial control service sequence of the same dimension with the standard operating sequence according to the known standard operating sequence of different dimensions comprises:
And for each dimension, according to the standard operation sequence of the dimension corresponding to the address information, sequentially comparing the industrial control service sequence of the dimension corresponding to the address information with the standard operation sequence of the dimension corresponding to the address information one by one.
5. The method according to claim 1, wherein if the industrial control service sequence of any dimension does not match the standard operation sequence, performing a safety control operation includes:
and if the industrial control service sequence of any dimension is not matched with the standard operation sequence, carrying out alarm prompt and blocking the issuing of the industrial operation instruction.
6. The method of claim 1, wherein the caching the industrial operation instructions received in chronological order to obtain a plurality of industrial control service sequences of different dimensions comprises:
And responding to an opening instruction of a specified sequence mode, and sequentially extracting a target operation instruction from the received industrial operation instruction according to the specified sequence mode to obtain the industrial control service sequences with different dimensions.
7. The method of claim 6, wherein the specified sequence pattern comprises any one of an operation serialization pattern, a parameter serialization pattern, and an operation parameter combination serialization pattern.
8. The method of claim 1, wherein prior to said comparing the same dimension of industrial control traffic sequence to the standard sequence of operation according to the known different dimension of standard sequence of operation, the method further comprises:
And according to the preset sequence analysis dimension, extracting industrial operation instructions in a normal running state, and sequentially arranging to obtain a plurality of standard operation sequences with different dimensions.
9. The method as recited in claim 8, further comprising:
And storing a plurality of standard operation sequences with different dimensions into a database, and stopping the extraction of the standard operation sequences until a stopping condition is met.
10. The method according to claim 9, wherein the stop condition includes any one of three stop conditions that a number of repetitions of each standard operation sequence exceeds a first threshold, a time during which no new standard operation sequence is added exceeds a second threshold, and a total extraction period exceeds a third threshold.
11. An industrial safety control device, comprising:
The system comprises an instruction cache module, a control module and a control module, wherein the instruction cache module is used for caching industrial operation instructions received according to time sequence to obtain a plurality of industrial control service sequences with different dimensions, wherein the dimensions refer to the number of industrial operation instructions contained in the industrial control service sequences;
The sequence comparison module is used for comparing the industrial control service sequence with the standard operation sequence of the same dimension according to the known standard operation sequences of different dimensions, and determining whether the industrial control service sequence is matched with the standard operation sequence;
and the safety control module is used for carrying out safety control operation if the industrial control service sequence of any dimension is not matched with the standard operation sequence.
12. An electronic device, the electronic device comprising:
a processor;
a memory for storing processor-executable instructions;
Wherein the processor is configured to perform the safety control method of an industrial operation of any one of claims 1-10.
13. A computer readable storage medium, characterized in that the storage medium stores a computer program executable by a processor to perform the safety control method of an industrial operation according to any one of claims 1-10.
CN202111335661.6A 2021-11-11 2021-11-11 Industrial operation safety control method, device, electronic equipment and storage medium Active CN116107271B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111335661.6A CN116107271B (en) 2021-11-11 2021-11-11 Industrial operation safety control method, device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111335661.6A CN116107271B (en) 2021-11-11 2021-11-11 Industrial operation safety control method, device, electronic equipment and storage medium

Publications (2)

Publication Number Publication Date
CN116107271A CN116107271A (en) 2023-05-12
CN116107271B true CN116107271B (en) 2025-09-23

Family

ID=86254916

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111335661.6A Active CN116107271B (en) 2021-11-11 2021-11-11 Industrial operation safety control method, device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN116107271B (en)

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101299237A (en) * 2008-06-05 2008-11-05 北京航空航天大学 High spectroscopic data supervision classifying method based on information quantity dimensionality sequence

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002033443A2 (en) * 2000-06-14 2002-04-25 Vermeer Manufacturing Company Utility mapping and data distribution system and method
US7533242B1 (en) * 2005-10-31 2009-05-12 Sun Microsystems, Inc. Prefetch hardware efficiency via prefetch hint instructions
US11023901B2 (en) * 2007-08-23 2021-06-01 Management Analytics, Inc. Method and/or system for providing and/or analyzing and/or presenting decision strategies
WO2017050140A1 (en) * 2015-09-23 2017-03-30 歌尔股份有限公司 Method for recognizing a human motion, method for recognizing a user action and smart terminal
US10063577B2 (en) * 2016-01-13 2018-08-28 International Business Machines Corporation Securing deployments using command analytics
US10360357B2 (en) * 2017-01-10 2019-07-23 International Business Machines Corporation Personal identification using action sequences detected by sensors
CN110278237A (en) * 2018-03-18 2019-09-24 江苏智慧新吴信息科技有限公司 A kind of multidimensional data combined strategy engine
CN109597681B (en) * 2018-10-22 2024-05-07 平安科技(深圳)有限公司 Cloud control method and device, computer equipment and storage medium
CN109522193A (en) * 2018-10-22 2019-03-26 网宿科技股份有限公司 A kind of processing method of operation/maintenance data, system and device
US10944770B2 (en) * 2018-10-25 2021-03-09 EMC IP Holding Company LLC Protecting against and learning attack vectors on web artifacts
CN111221722B (en) * 2019-09-23 2024-01-30 平安科技(深圳)有限公司 Behavior detection method, behavior detection device, electronic equipment and storage medium

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101299237A (en) * 2008-06-05 2008-11-05 北京航空航天大学 High spectroscopic data supervision classifying method based on information quantity dimensionality sequence

Also Published As

Publication number Publication date
CN116107271A (en) 2023-05-12

Similar Documents

Publication Publication Date Title
CN110177108B (en) Abnormal behavior detection method, device and verification system
CN107888554B (en) Method and device for detecting server attack
CN109815697B (en) False positive behavior processing method and device
CN113486350B (en) Method, device, equipment and storage medium for identifying malicious software
CN111159697B (en) Key detection method and device and electronic equipment
CN112631888A (en) Fault prediction method and device of distributed system, storage medium and electronic equipment
CN110933104A (en) Malicious command detection method, device, equipment and medium
CN114116500B (en) Unknown protocol fuzzy test method and device
CN109284331B (en) Certificate making information acquisition method based on service data resources, terminal equipment and medium
CN114422186B (en) Attack detection method and device, electronic equipment and storage medium
CN113516529A (en) Abnormal order determination method, device, storage medium and electronic device
CN116366377B (en) Malicious file detection method, device, equipment and storage medium
CN113378161A (en) Security detection method, device, equipment and storage medium
CN109086186B (en) Log detection method and device
CN113075212B (en) Vehicle verification method and device
CN107357619B (en) Method, device, equipment and storage medium for generating card configuration file
CN116107271B (en) Industrial operation safety control method, device, electronic equipment and storage medium
JP2022522790A (en) Methods and devices for tracking blockchain transactions
KR102308477B1 (en) Method for Generating Information of Malware Which Describes the Attack Charateristics of the Malware
CN118860455A (en) Server firmware refresh method and device, storage medium and electronic device
CN114531262A (en) Method and device for identifying vulnerability scanning behaviors
CN115017114B (en) A method, device, equipment and storage medium for processing false alarm files
CN113110986A (en) WebShell script file detection method and system
CN116506276A (en) Mining method and system for relevance of alarm data
CN114640507A (en) WebShell detection method and device and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information
CB02 Change of applicant information

Address after: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing

Applicant after: QAX Technology Group Inc.

Applicant after: Qianxin Wangshen information technology (Beijing) Co.,Ltd.

Address before: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing

Applicant before: QAX Technology Group Inc.

Applicant before: LEGENDSEC INFORMATION TECHNOLOGY (BEIJING) Inc.

GR01 Patent grant