CN110012018A - An industrial network security system - Google Patents

Abstract

A kind of industrial network security system, including master control device, illegally log in alarm, fault alarm, route selftest module, mobile terminal, web terminal, Cloud Server and picture pick-up device；Wherein, master control device includes central processing unit and login module；Login module includes finger print acquisition module, fingerprint read module and password identification module；Master control device, illegal login alarm and fault alarm are located in Master Control Room, and route selftest module is arranged in equipment；Picture pick-up device is used to shoot the movement of operator by master control device.The industrial network security system, pass through the double verification of fingerprint read module and password identification module, and then increase the safety of use process, by central processing unit repeatedly to the information matches of authentication, and then alarm command is issued to the illegal alarm that logs in, warning message is uploaded to Cloud Server simultaneously, and warning message is sent to the mobile terminal of staff by Cloud Server, and then is handled in time.

Description

An industrial network security system

technical field

The invention relates to the field of industrial networks, in particular to an industrial network security system.

Background technique

Industrial network refers to a fully digital, two-way and multi-station communication system installed in an industrial production environment. The generation of network technology has the following advantages for industrial control: (1) easy installation and wiring; (2) modularization; (3) Self-construction; (4) Enterprise management; although industrial control networks have these advantages, each manufacturer will vigorously promote its own network standards for their own interests. Different network protocols are aimed at specific application fields, so they have their own characteristics. , each with its own environment and value. And new protocols are still being produced, so users are often at a loss, and will be clamped by some manufacturers. The cost that must be increased by networking is often a heavy burden for users, so until now, the existing industrial network still exists. Many disadvantages.

Although the current industrial network has the above characteristics, it lacks identity authentication during login operations. When non-administrators operate, it will cause hidden dangers to the security of the industrial network and reduce the security of the use of the industrial network. It also lacks real-time monitoring and control of lines. Process the collected fault information, power outage, power transmission status and other information; it is impossible to accurately count and analyze the information of the industrial system, determine the fault area, and issue an alarm to remind the person in charge of line maintenance, etc., so there is a lack of guidance for the staff to quickly Accurately troubleshoot line faults.

In order to solve the above problems, an industrial network security system is proposed in this application.

SUMMARY OF THE INVENTION

(1) Purpose of the invention

In order to solve the technical problems existing in the background technology, the present invention proposes an industrial network security system. The present invention can only operate the master control device by the staff who have passed the identity authentication successfully. If the identity authentication fails for many times, the illegal login alarm will send an alarm. , the cloud server sends the alarm information to the mobile phone of the staff in real time, reminding the relevant staff to know the alarm information in time; the line self-checking module monitors the line in real time, sends the line fault information to the maintenance personnel, and the maintenance personnel check the equipment line ; Simultaneous login information is stored in real time.

(2) Technical solutions

In order to solve the above problems, the present invention provides an industrial network security system, including a general control device, an illegal login alarm, a fault alarm, a line self-checking module, a mobile terminal, a web terminal, a cloud server and a camera device; The control device includes a central processing unit and a login module; the login module includes a fingerprint acquisition module, a fingerprint reading module and a password identification module;

The master control device, illegal login alarm and fault alarm are located in the master control room, and the line self-checking module is set on the equipment;

The camera equipment is used to photograph the actions of the operator next to the master control device; the central processing unit is connected to the camera equipment for communication and is used to receive the picture information A and video information B captured by the camera equipment; the central processing unit is connected to the fingerprint collection module for communication and connection. Receive the fingerprint information C collected by the fingerprint collection module; the central processing unit is in communication connection with the fingerprint reading module, and is used for receiving the fingerprint information D read by the fingerprint reading module; the central processing unit is in communication connection with the password identification module, for receiving the input password information G;

The line self-checking module is used to check the current value and voltage value of the equipment; the central processing unit is connected to the line self-checking module in communication, and is used to receive the current value E and the voltage value F detected by the line self-checking module;

The fault alarm is connected to the central processing unit in communication, and is used to execute the alarm action according to the instructions sent by the central processing unit;

The illegal login alarm is connected to the central processing unit in communication, and is used to execute the alarm action according to the instructions sent by the central processing unit;

The interior of the central processing unit is provided with a data storage module for storing information C, and an information processing module for analyzing and processing information D, current value E and voltage value F;

A remote communication module is set inside the central processing unit, and is connected to the cloud server through the remote communication module, so as to send the picture information A, video information B, collected fingerprint information C, fingerprint information D, current value E and voltage value F to the cloud server for record storage;

The cloud server communicates and connects the web terminal and the mobile terminal at the same time, so as to display the information on the web terminal and the mobile terminal; the cloud server is also used to receive the control instructions of the web terminal and the mobile terminal, and send the control instructions to the central processing unit;

Preferably, the mobile terminal is a mobile terminal.

Preferably, multiple mobile terminals are provided.

Preferably, the line self-checking module sends the voltage value F and the current value E to the central processing unit in real time.

Preferably, the authentication steps are as follows:

S1. Enter the password and place your finger on the fingerprint reading module;

S2. Both the fingerprint information D collected by the fingerprint collection module and the input password information G are sent to the central processing unit;

S3, the information processing module in the central processing unit processor matches the password information G and the fingerprint information D;

S4. If one of the information in the password information G and the fingerprint information D does not match, re-verification is required; if the three consecutive information matches are unsuccessful, the central processing unit sends an illegal login alarm instruction to the illegal login alarm, and the illegal login alarm At the same time, the illegal login information is uploaded to the cloud server, and the cloud server sends an alarm information to the mobile terminal; if the password information G and fingerprint information D information match the information stored in the central processing unit, the illegal login alarm will not respond. .

Preferably, the cloud server periodically sends out illegal intrusion alarm information and makes a call to the mobile terminal of the staff until the staff clears the alarm.

Preferably, the line self-checking module includes a current detecting unit, a voltage detecting unit and a positioning unit.

The above-mentioned technical solutions of the present invention have the following beneficial technical effects: through the double synchronous verification of the fingerprint reading module and the password identification module, the security of the use process is further increased, and the information of the identity verification is matched for many times by the central processing unit, and the Illegal login to the alarm device sends out an alarm command, and at the same time uploads the alarm information to the cloud server, and the cloud server sends the alarm information to the mobile terminal of the staff, so that the staff can deal with it in time. At the same time, the line self-checking module monitors the current and voltage values of the connected equipment in the entire system in real time, and sends it to the central processing unit for data comparison. When the current and voltage are in abnormal values, the central processing unit sends the fault alarm and cloud The server sends fault instructions to notify the staff of fault messages in a timely manner, which improves the effect of timely troubleshooting and timely availability. Under the action of the cloud server, the effect of real-time data recording is achieved, which is convenient for viewing through mobile terminals and web terminals. It is convenient for the remote control of the master control device by the web terminal and the mobile terminal.

Description of drawings

FIG. 1 is a system diagram of an industrial network security system proposed by the present invention.

Reference number:

1. Master control device; 2. Illegal login alarm; 3. Fault alarm; 4. Line self-checking module; 5. Mobile terminal; 6. Web terminal; 7. Cloud server; 8. Camera equipment; 9. Central processing 10. Login module; 11. Fingerprint acquisition module; 12. Fingerprint reading module; 13. Password identification module.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the specific embodiments and the accompanying drawings. It should be understood that these descriptions are exemplary only and are not intended to limit the scope of the invention. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concepts of the present invention.

As shown in Figure 1, an industrial network security system proposed by the present invention includes a master control device 1, an illegal login alarm 2, a fault alarm 3, a line self-checking module 4, a mobile terminal 5, a web terminal 6, and a cloud server. 7 and camera equipment 8; wherein, the master control device 1 includes a central processing unit 9 and a login module 10; the login module 10 includes a fingerprint collection module 11, a fingerprint reading module 12 and a password identification module 13;

The master control device 1, the illegal login alarm 2 and the fault alarm 3 are located in the master control room, and the line self-checking module 4 is arranged on the equipment;

The camera equipment 8 is used to photograph the actions of the operator beside the master control device 1; the central processing unit 9 is connected to the camera equipment 8 for communication, and is used to receive the picture information A and video information B captured by the camera equipment 8; the central processing unit 9 and the fingerprint collection The module 11 is in communication connection for receiving the fingerprint information C collected by the fingerprint collection module 11; the central processing unit 9 is in communication connection with the fingerprint reading module 12, and is used for receiving the fingerprint information D read by the fingerprint reading module 12; the central processing unit 9 communicated with the password identification module 13 for receiving the entered password information G;

The line self-checking module 4 is used to check the current value and voltage value of the equipment; the central processing unit 9 is connected in communication with the line self-checking module 4 for receiving the current value E and the voltage value F detected by the line self-checking module 4;

The fault alarm device 3 is connected in communication with the central processing unit 9, and is used to execute the alarm action according to the instructions sent by the central processing unit 9;

The illegal login alarm 2 is connected in communication with the central processing unit 9, and is used to execute the alarm action according to the instructions sent by the central processing unit 9;

The interior of the central processing unit 9 is provided with a data storage module for storing information C, and an information processing module for analyzing and processing information D, current value E and voltage value F;

The central processing unit 9 is internally provided with a remote communication module, and communicates with the cloud server 7 through the remote communication module, so as to send the picture information A, video information B, collected fingerprint information C, fingerprint information D, current value E and voltage value F. to the cloud server 7 for record storage;

The cloud server 7 communicates and connects the web terminal 6 and the mobile terminal 5 at the same time, so as to display information on the web terminal 6 and the mobile terminal 5; the cloud server 7 is also used for receiving the control instructions of the web terminal 6 and the mobile terminal 5, and displaying the control instructions sent to the central processing unit 9;

In an optional embodiment, the mobile terminal 5 is a mobile phone terminal.

In an optional embodiment, multiple mobile terminals 5 are set, and by setting multiple sets, the alarm information can be discovered in time.

In an optional embodiment, the line self-checking module 4 sends the voltage value F and the current value E to the central processing unit 9 in real time.

In an optional embodiment, the authentication steps are as follows:

S1, input the password and place the finger on the fingerprint reading module 12;

S2, the fingerprint information D collected by the fingerprint collection module 11 and the input password information G are both sent to the central processing unit 9;

S3, the information processing module in the processor of the central processing unit 9 matches the password information G and the fingerprint information D;

S4. If one of the information in the password information G and the fingerprint information D does not match, it needs to be re-authenticated; if the three consecutive information matches are unsuccessful, the central processing unit 9 sends an illegal login alarm instruction to the illegal login alarm 2, and the illegal login The alarm device 2 alarms, and the illegal login information is uploaded to the cloud server 7 at the same time, and the cloud server 7 sends out an alarm message to the mobile terminal 5; if the password information G and fingerprint information D information match the information stored in the central processing unit 9, then the illegal login Alarm 2 will not respond.

In an optional embodiment, the cloud server 7 periodically sends out illegal intrusion alarm information to the mobile terminal 5 of the staff member and makes a call until the staff member cancels the alarm, so as to avoid the staff member missing to know the alarm information due to inattentiveness. .

In an optional embodiment, the line self-checking module 4 includes a current detecting unit, a voltage detecting unit, and a locating unit, and the locating unit locates the fault location, thereby facilitating the finding of the fault location.

It should be understood that the above-mentioned specific embodiments of the present invention are only used to illustrate or explain the principle of the present invention, but not to limit the present invention. Therefore, any modifications, equivalent replacements, improvements, etc. made without departing from the spirit and scope of the present invention should be included within the protection scope of the present invention. Furthermore, the appended claims of this invention are intended to cover all changes and modifications that fall within the scope and boundaries of the appended claims, or the equivalents of such scope and boundaries.

Claims (7)

1. a kind of industrial network security system, which is characterized in that including master control device (1), illegally log in alarm (2), failure Alarm (3), route selftest module (4), mobile terminal (5), web terminal (6), Cloud Server (7) and picture pick-up device (8)；Wherein, always Controlling device (1) includes central processing unit (9) and login module (10)；Login module (10) includes finger print acquisition module (11), refers to Line read module (12) and password identification module (13)；

Master control device (1), illegally login alarm (2) and fault alarm (3) are located in Master Control Room, route selftest module (4) It is arranged in equipment；

Picture pick-up device (8) is used to shoot the movement of the other operator of master control device (1)；Central processing unit (9) and picture pick-up device (8) are logical News connection, for receiving the pictorial information A and video information B of picture pick-up device (8) shooting；Central processing unit (9) is adopted with fingerprint Collect module (11) communication connection, for receiving the finger print information C of finger print acquisition module (11) acquisition；Central processing unit (9) and finger Line read module (12) communication connection, for receiving the finger print information D of fingerprint read module (12) reading；Central processing unit (9) With password identification module (13) communication connection, encrypted message G for receiving input；

Route selftest module (4) is used to check the current value and voltage value of equipment；Central processing unit (9) and route selftest module (4) communication connection, current value E and voltage value F for receiving circuit selftest module (4) detection；

Fault alarm (3) and central processing unit (9) communication connection, the instruction for being sent according to central processing unit (9), execute Actuation of an alarm；

Illegal to log in alarm (2) and central processing unit (9) communication connection, for being sent according to central processing unit (9) instruction, Execute actuation of an alarm；

The data memory module for storing information C is arranged in the inside of central processing unit (9), and for information D, current value The message processing module that E and voltage value F are analyzed and processed；

Remote communication module is set inside central processing unit (9), and is connected by remote communication module and Cloud Server (7) communication It connects, pictorial information A, video information B, the finger print information C of acquisition, finger print information D, current value E and voltage value F is sent to Cloud Server (7) carries out record storage；

Cloud Server (7) simultaneous communications connect web terminal (6) and mobile terminal (5), by information in web terminal (6) and mobile terminal (5) Upper display；Cloud Server (7) is also used to receive the control instruction of web terminal (6) and mobile terminal (5), and control instruction is sent to Central processing unit (9).

2. a kind of industrial network security system according to claim 1, which is characterized in that mobile terminal (5) are mobile phone terminal.

3. a kind of industrial network security system according to claim 1, which is characterized in that mobile terminal (5) setting is multiple.

4. a kind of industrial network security system according to claim 1, which is characterized in that route selftest module (4) is real-time Voltage value F and current value E is sent to central processing unit (9).

5. a kind of industrial network security system according to claim 1 to 4, which is characterized in that authentication step is such as Under:

S1, it inputs password and places a finger on fingerprint read module (12)；

The encrypted message G of S2, the finger print information D of finger print acquisition module (11) acquisition and input are sent to central processing unit (9) It is interior；

Message processing module in S3, central processing unit (9) processor matches encrypted message G and finger print information D；

If one of information mismatches in S4, encrypted message G and finger print information D, need to verify again；If continuously three times Information matches are unsuccessful, then central processing unit (9) sends the illegal alarm command that logs in illegally alarm (2) are logged in, illegally Alarm (2) alarm is logged in, while illegal log-on message is uploaded to Cloud Server (7), Cloud Server (7) is sent out to mobile terminal (5) Warning information out；If the information matches deposited in encrypted message G and finger print information D information and central processing unit (9), are illegally stepped on Record alarm (2) will not respond.

6. a kind of industrial network security system according to claim 7, which is characterized in that Cloud Server (7) is periodic Illegal invasion warning information is issued to the mobile terminal (5) of staff and is made a phone call, until staff sounds all clear.

7. a kind of industrial network security system according to claim 1, which is characterized in that route selftest module (4) includes Current detecting unit, voltage detection unit and positioning unit.