数字化车间信息安全机制的研究与实现

发布时间：2018-04-16 02:22

本文选题：数字化车间管理 + 数据加密　；参考：《中国科学院大学(中国科学院沈阳计算技术研究所)》2017年硕士论文

【摘要】：基于互联网+物联网的车间管理系统使得车间管理者可以通过系统客户端远程监控整个车间机床设备运行的实时状态。数据由服务器向终端或终端传输到服务器传输过程中,数据信息容易被监听或者篡改,会造成信息泄露或数据显示虚假数据,如果在工控领域可能接收错误的指令信息,从而给工业生产带来巨大危害和损失,所以为了保证终端与服务器以及工业设备和管理系统之间网络通信的可靠与数据安全,使用安全的通信连接和可靠的数据加密算法来保证通信和数据安全非常必要。与此同时合理的使用数字指纹摘要以保证加密数据的完整。所以可以实现多重加密,以提高工业设备系统与车间管理系统以及终端设备管理系统的通信和数据安全。本文以数字化车间管理系统为基础原型,以Android客户端和IOS端为示例原型。提出了一种基于改进的AES和MD5混合加密方案,在通讯过程中使用SSL对传输通道进行连接加密,使用改进的对称加密算法AES对网络传输中的数据进行加密,并且在发送端加密数据后使用改进的MD5对加密的数据生成数字指纹,在接收端同时对发过来的加密数据使用MD5生成相同指纹,通过摘要指纹效验判断数据在传输过程中是否被篡改或丢失。测试结果显示,多重加密方案成功的实现了端到端的数据加解密,对于性能和网络损耗不高于15%,符合工业控制系统实时的要求,因此此方案适用于消除车间管理系统实时采集的数据在端到端的通讯传输中被篡改的可能,极大可能的提高了车间管理系统通讯和数据的安全性和可靠性。
[Abstract]:The workshop management system based on Internet of things (IoT) enables workshop managers to remotely monitor the real-time state of the whole workshop machine tool equipment through the system client.When the data is transmitted from server to terminal or terminal to server, the data information is easy to be monitored or tampered with, which may cause information leakage or data display false data, if the wrong instruction information may be received in the field of industrial control,Therefore, in order to ensure the reliability and data security of network communication between terminal and server, industrial equipment and management system,It is necessary to use secure communication connection and reliable data encryption algorithm to ensure communication and data security.At the same time, digital fingerprint digest is used reasonably to ensure the integrity of encrypted data.So we can realize multiple encryption to improve the communication and data security of industrial equipment system, workshop management system and terminal equipment management system.This paper takes the digital workshop management system as the base prototype and the Android client and IOS as the sample prototype.In this paper, a hybrid encryption scheme based on improved AES and MD5 is proposed. In the process of communication, SSL is used to encrypt the transmission channel, and the improved symmetric encryption algorithm, AES, is used to encrypt the data in network transmission.After encrypting the data at the sending end, the improved MD5 is used to generate the digital fingerprint for the encrypted data, and the same fingerprint is generated using MD5 for the encrypted data sent at the receiving end at the same time.Fingerprint verification is used to determine whether the data is tampered with or lost during transmission.The test results show that the multiplex encryption scheme successfully realizes end-to-end data encryption and decryption, and the performance and network loss are not higher than 15, which meet the real-time requirements of industrial control system.Therefore, this scheme is suitable for eliminating the possibility that the real-time data collected by workshop management system can be tampered with in end-to-end communication transmission, and the security and reliability of the communication and data of workshop management system can be greatly improved.
【学位授予单位】：中国科学院大学(中国科学院沈阳计算技术研究所)
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309

【参考文献】