CN-122027364-A - Intelligent management and control method and system for switching internal network and external network

CN122027364ACN 122027364 ACN122027364 ACN 122027364ACN-122027364-A

Abstract

The invention belongs to the technical field of industrial control, and particularly relates to an intelligent management and control method and system for switching an internal network and an external network, wherein the method comprises the steps of obtaining a data message, analyzing the data message to obtain an instantaneous arrival rate, a current protocol entropy and a first message residence time, and obtaining a historical reference parameter through online statistics and learning; the method comprises the steps of obtaining load urgency according to a real-time queue length deviation and rate multiplication relation, obtaining a dynamic risk locking index by utilizing the deviation degree of a current protocol entropy relative to a historical mean value, and obtaining switching driving force by combining the load urgency, the risk index, the accumulated action times of an isolation relay, the design life and other fatigue characteristics. And finally, controlling the action of the isolation relay according to the switching driving force to realize the switching between the internal network and the external network and the closed loop correction. The invention solves the problems of switching misjudgment and equipment vulnerability through multidimensional state sensing and hardware fatigue inhibition, and improves the safety and reliability of switching the internal network and the external network.

Inventors

CHEN WEINING
SU JIANBO
ZHANG XIAOMEI
WU XIAOJU
HONG YONGSHENG
HAN XIONG

Assignees

山西华控伟业科技股份有限公司

Dates

Publication Date: 20260512
Application Date: 20260413

Claims (10)

1. An intelligent management and control method for switching between an internal network and an external network is characterized by comprising the following steps: Obtaining a data message and carrying out flow analysis to obtain a historical queue mean value, a historical queue standard deviation, a historical average rate, a historical average residence time, a historical protocol entropy mean value and a historical protocol entropy standard deviation; carrying out load assessment according to the real-time queue length, the historical queue mean value, the historical queue standard deviation, the instantaneous arrival rate, the historical average rate, the first message residence time and the historical average residence time to obtain load urgency; performing risk assessment according to the current protocol entropy, the historical protocol entropy mean value, the historical protocol entropy standard deviation and the entropy variance change rate to obtain a dynamic risk locking index; Performing driving force mapping according to the load urgency, the dynamic risk locking index, the accumulated action times, the designed mechanical life and the connection duration to obtain switching driving force; The isolation relay is driven to act according to the switching driving force, and switching between the internal network and the external network is realized.
2. The method for intelligent management and control of switching between internal and external networks according to claim 1, wherein the steps of obtaining a data message and analyzing the flow include: The method comprises the steps of counting the number of messages in unit time to obtain instantaneous arrival rate, analyzing the distribution probability of a message header protocol field, carrying out information entropy analysis to obtain the current protocol entropy, and obtaining the residence time of a first message through a queue time stamp marking technology.
3. The method for intelligent management and control of switching between internal and external networks according to claim 1, wherein the load urgency satisfies the expression: ; In the formula, Is load urgency; is the real-time queue length; the average value is the historical queue average value; Standard deviation is the historical queue; zero constant is prevented for the queue; Is the instantaneous arrival rate; The residence time of the first message; is the historical average rate; Is the historical average residence time; Zero constant is prevented for impulse.
4. The intelligent management and control method for switching between internal and external networks according to claim 3, wherein the impulse zero-proof constant 0.01.
5. The method for intelligent management and control of switching between internal and external networks according to claim 1, wherein the dynamic risk locking index satisfies the expression: ; In the formula, Locking the index for dynamic risk; Is the current protocol entropy; Is the entropy mean value of the historical protocol; Is the standard deviation of the entropy of the historical protocol; Is a risk sensitivity gain coefficient; Is the entropy variance change rate; Is a numerical stability constant; as a natural exponential function.
6. The intelligent management and control method for switching between internal and external networks according to claim 5, wherein the risk sensitivity gain coefficient has a value of 3.
7. The method for intelligent management and control of switching between internal and external networks according to claim 1, wherein the switching driving force satisfies the expression: ; In the formula, To switch the driving force; is load urgency; blocking the gain factor for risk; locking the index for dynamic risk; is a mechanical protection strength coefficient; Is a natural logarithmic function; To accumulate the action times; to design mechanical life; Restoring a time constant for the mechanical properties of the relay; For the connection duration; is a time zero-proof constant.
8. The method for intelligent management and control of switching between internal and external networks according to claim 7, wherein the risk blocking gain factor is set to 30.
9. The method for intelligent management and control of switching between internal and external networks according to claim 1, wherein the driving of the isolation relay according to the switching driving force comprises: When the switching driving force is larger than 0, a high-level pulse signal is output to drive the coil of the isolation relay to attract so as to switch the physical contact point of the data link, and when the switching driving force is converted into a negative value due to the sudden increase of the dynamic risk locking index, the coil is cut off from power supply, and the contact point connection of the isolation relay is disconnected by using the mechanical spring force.
10. An intranet and extranet switching intelligent management and control system, characterized by comprising a processor and a memory, wherein the memory stores computer program instructions, and when the computer program instructions are executed by the processor, the method for realizing the intranet and extranet switching intelligent management and control according to any one of claims 1-9 is realized.

Description

Intelligent management and control method and system for switching internal network and external network Technical Field The invention relates to the technical field of industrial control. More particularly, the invention relates to an intelligent management and control method and system for switching between an internal network and an external network. Background In order to meet the requirements of safety of production internal network and data interaction of external internet, the conventional switching control mainly depends on a preset flow threshold or a simple time slice rotation mechanism, and utilizes physical on-off of an isolation relay to change a data transmission path, however, as the industrial Internet of things evolves, network flow presents high nonlinearity and time-varying characteristics, static switching logic is difficult to adapt to instantaneous fluctuation of network load, buffer overflow caused by switching hysteresis or communication jitter caused by switching over frequency is easy to be caused, meanwhile, the conventional control mode is often focused on a single flow statistics index, deep analysis on a data packet protocol distribution rule is lacked, and when the problem of attack threat of hidden abnormal flow or protocol layer is faced, the safety risk condition of a link cannot be quantitatively evaluated in real time. Due to extremely high requirements of industrial production environment on instantaneity and stability, small delay or misjudgment in any switching process can cause blocked issuing of production instructions to further influence the working efficiency of a production line, under the increasingly complex background of network security, the microscopic variation of a protocol layer often indicates potential security threat by only insufficient flow characteristics to comprehensively describe the real state of the network environment, and finally, the disconnecting phenomenon exists between physical constraint of a hardware layer and logic decision of an algorithm layer for a long time, so that isolation equipment is often in an overload running state when frequently responding to upper-layer instructions, and the service period and reliability of the isolation equipment such as an industrial network gate are greatly limited by management and control logic lacking physical self-adaption capability. Disclosure of Invention In order to solve the technical problems of switching misjudgment and equipment vulnerability caused by inaccurate dynamic flow evaluation, single safety risk sensing dimension and neglect of mechanical fatigue in the internal and external network switching process, the invention provides a scheme in the following aspects. In a first aspect, the invention provides an intelligent management and control method for switching an internal network and an external network, which comprises the steps of obtaining a data message, carrying out flow analysis to obtain a historical queue mean value, a historical queue standard deviation, a historical average speed, a historical average residence time, a historical protocol entropy mean value and a historical protocol entropy standard deviation, carrying out load evaluation according to a real-time queue length, the historical queue mean value, the historical queue standard deviation, an instantaneous arrival speed, the historical average speed, a first message residence time and the historical average residence time to obtain a load urgency, carrying out risk evaluation according to a current protocol entropy, a historical protocol entropy mean value, a historical protocol entropy standard deviation and an entropy variance change rate to obtain a dynamic risk locking index, carrying out driving force mapping according to the load urgency, the dynamic risk locking index, accumulated action times, a design mechanical life and a connection duration to obtain a switching driving force, and driving an isolation relay according to the switching driving force to act to realize switching of the internal network and the external network. According to the invention, the flow characteristics such as the real-time queue length and the instantaneous arrival rate are acquired by analyzing the data message, the load urgency and the dynamic risk locking index are evaluated, the switching driving force is acquired by combining the flow load and the safety risk dimension, and the isolation relay is driven to act accordingly, so that the function of adjusting the internal and external network physical switching logic according to the real-time network state is realized, and the switching lag or misoperation phenomenon caused by inaccurate judgment of a single flow index is reduced. Preferably, the data message obtaining and flow analysis comprise the steps of counting the number of messages in unit time to obtain instantaneous arrival rate, analyzing the distribution probability of a message header protocol field and carry