工业互联网层级架构与安全:复杂网络新视角  

Hierarchical architecture and security of Industrial Internet:A new perspective from complex network

作　　者：吕金虎 任磊 谭少林[1] 赖李媛君 孔宇升 王雅哲[1] LÜJinHu;REN Lei;TAN ShaoLin;LAI LiYuanJun;KONG YuSheng;WANG YaZhe(Zhongguancun Laboratory,Beijing 100094,China;School of Automation Science and Electrical Engineering,Beihang University,Beijing 100191,China)

机构地区：[1]中关村实验室,北京100094 [2]北京航空航天大学自动化科学与电气工程学院,北京100191

出　　处：《中国科学：技术科学》2024年第10期2042-2052,共11页Scientia Sinica(Technologica)

基　　金：国家重点研发计划(编号:2022YFB3305600);国家自然科学基金(批准号:T2322023,61621003,62141604)资助项目。

摘　　要：工业互联网是新一代信息技术与制造业深度融合的产物.通过构建人-机-物全面互联的新型工业制造平台,工业互联网正快速推动着传统工业生产与服务模式朝向数字化、网络化、智能化方向变革与发展.本文从多层级动态异构复杂网络的视角,系统阐述制造业工业互联网的层级架构与系统安全.具体地,通过详细分析工业制造过程中设备层、产线层、企业层与跨企业层的核心功能组件及其关键技术,阐明传统工控系统与新一代工业互联网之间的联系与区别.特别地,本文将从新型末端设备的智能防护接口、弹性自愈合工控网络、IT/OT跨域信任传递与异常检测、工业数据流通保护与溯源等几个方面,聚焦工业互联网安全的关键技术与挑战.Industrial Internet is the product of deep integration between new-generation information technology and the manufacturing industry.Through constructing a new type of industrial manufacturing platform for human-cyber-physical networks,the Industrial Internet is rapidly driving the transformation and development of manufacturing mode towards digital,networked,and intelligent formulation.From a forward-looking perspective,this paper aims to systematically elaborate the hierarchical architecture and system security of manufacturing Industrial Internet based on the theory and methods of complex network cooperative control systems.In detail,the differences between traditional industrial manufacturing systems and Industrial Internet will be discussed from the aspects of key functional components and their core technologies at the device,production line,enterprise,and cross-enterprise levels,respectively.Furthermore,the paper also highlights key technologies and challenges of Industrial Internet security,including intelligent protection interfaces for new terminal devices,resilient self-healing industrial control networks,IT/OT cross-domain trust transmission and anomaly detection,industrial data circulation protection and traceability.

关 键 词：工业互联网 云网边端 智能制造 工控系统 数据保护 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术] O157.5[自动化与计算机技术—计算机科学与技术]