基于安全通信的监控组态软件PLC数据驱动系统的实现  

Implementation of PLC data drive system for supervisory control and data acquisition software based on secure communication

作　　者：王毅璇[1] 封成玉 王皓[1] Wang Yixuan;Feng Chengyu;Wang Hao(National Computer System Engineering Research Institute of China,Beijing 100083,China)

机构地区：[1]华北计算机系统工程研究所

出　　处：《信息技术与网络安全》2019年第8期47-52,共6页Information Technology and Network Security

摘　　要：为实现上位机监控组态软件与基于国产可信的PLC之间安全可信通信,提出了一种跨平台的PLC数据驱动系统的实现方案。在对系统进行功能分析的基础上,对系统进行整体设计、模块设计,使安全验证服务独立于数据驱动应用服务,实现了运行和上层应用相隔离。系统采用Qt开发,基于分布式C/S架构,支持国产Linux操作系统,并能平稳移植到Windows操作系统平台上。通过使用安全认证、建立安全通道及采用基于一次性密钥(OTP)理念的密码机制的数据传输方法,保证了通信过程的可靠性、安全性和稳定性,体现了主动免疫防御的设计思想。In order to realize the secure and trusted communication between supervisory control and data acquisition software and domestic trusted PLC,a cross - platform data drive system scheme is proposed.On the basis of the functional analysis of the data drive system, the paper designs the whole system and the modules of the system,makes security authentication services independent of data-driven application services,realizes the separation of operation and the upper application.The system is developed by Qt,based on distributed C/S architecture,supports for domestic Linux operating system,and can be smoothly transplanted to the platform of Windows operating system.By using security authentication,establishing secure channel and using data transmission method based on cryptographic mechanism of One Time Password(OPT),the reliability,security and stability of communication process are guaranteed,meantime,it reflects the design idea of active immune defense.

关 键 词：上位机监控软件 跨平台 PLC通信 安全可信 

分 类 号：TN918.1[电子电信—通信与信息系统]