Method for encrypting communication process in industrial field and data collection device

Abstract

The invention discloses a method for encrypting the communication process in the industrial field and a data collection device. The method includes: invoking a first secret key in a first secret key disc to perform server side encrypting for regularly generated random data; sending the random data after server side encrypting to a client side; receiving data after client side encrypting sent by the client side; invoking the first secret key in the first secret key disc to perform decrypting for the data after client side encrypting; judging whether the decrypted data are identical to the random data to obtain a first judging result; and adopting the random data to serve as symmetrically secret keys to encrypt the communication process between the client side and the server side when the first judging result indicates that the decrypted data are identical to the random data. By adopting the method and the device, safety of the whole communication process can be improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for encrypting a communication process in an industrial field and a data collection device. Background technique [0002] With the development of enterprise informatization, the data of underlying control systems in the industrial field, such as distributed control systems (Distributed Control System, DCS) or programmable logic controllers (Programmable Logic Controller, PLC) are increasingly integrated into the In the upper application system. Although this has greatly improved the management efficiency of the enterprise, it has also brought serious security risks. Because once a malicious attacker intercepts the communication between the upper-level application system and the lower-level control system through network monitoring or other methods, and sends forged control information to the control system, the security of enterprise production will be seriously enda...

AI Technical Summary

Problems solved by technology

[0004] But, there is following shortcoming in the prior art to the method for encrypting the communication process in the industrial field: the first, the private key and the digital certificate file in the asymmetric encryption algorithm only use software to save on the disk of server or client, assailant can Obtain the private key and digital certificate files stored on the disk by remotely intruding into the server. Once the private key is leaked, the entire security system will be cracked

Second, because SSL technology uses an asymmetric encryption algorithm to exchange a symmetric key during the handshake phase, and then uses the symmetric key to encrypt communication data in subsequent communications, it is possible for an attacker to accumulate enough communication history data to Deduce the symmetric encryption key used, if so, the attacker may hijack the communication and send forged commands

Images