Output decision device and method for heterogeneous triplication redundancy processor

Abstract

The invention belongs to the technical fields of industrial control system safety protection and other technical fields with high requirements for system safety and reliability, and particularly relates to an output decision device and method for a heterogeneous triplication redundancy processor. The device comprises three heterogeneous processors for providing service for the external, a synchronizer, an output decision device and a washer. The heterogeneous processors are connected with the synchronizer, the output decision device and the washer. Since the output decision device can change the decision strategy and its mode according to the external configuration parameter, on one hand, the probability of outputting the wrong result of the heterogeneous triplication redundancy processor can be reduced by at least one order of magnitude through the highly reliable decision strategy, and the processor reliability is improved, and on the other hand, the structural features of the heterogeneous triplication redundancy processor are masked by the output decision device, and with the combination of its heterogeneous redundancy, the heterogeneous triplication redundancy processor can well conceal its true structural information and increase the difficulty of attacking sniffing and implementation.

Description

technical field [0001] The invention belongs to the field of industrial control system safety protection technology and other technical fields requiring high system safety and reliability, and in particular relates to an output judging device and method of a heterogeneous triple-mode redundant processor. Background technique [0002] With the popularization and development of computer network technology in industrial control systems, industrial control systems including (DCS, PLC, TCS, SCADA) system networks have been popularized in all fields of industrial industries. The original design of the industrial control system aimed at high reliability, high real-time performance, and high controllability, but the informatization of the industrial control system has amplified the internal hidden dangers and external interference of the system, resulting in frequent occurrence of industrial control security incidents in recent years, causing hidden dangers Highly pervasive, wide-ra...

AI Technical Summary

Problems solved by technology

Boundary protection devices can only protect against known attacks, but cannot protect against unknown attacks caused by the loopholes and backdoors of the industrial control system itself

[0004] Most existing industrial control systems use isomorphic redundancy design to improve system reliability, but the internal structure and design logic of isomorphic redundant components are the same, and the existing loopholes and backdoors are also the same. The defects of other redundant bodies are mastered, and the attack on this defect will not guarantee the reliability of system information security.

Images