PLC remote firmware upgrading system and method

Abstract

The invention provides a PLC (Programmable Logic Controller) remote firmware upgrading method, which comprises the following steps that: after an upper computer performs user authorization login authentication through a first security module, an upgrading server and PLC equipment perform bidirectional identity authentication and key negotiation through a second security module to obtain a sessionkey; the upper computer performs summary information calculation on the upgrading data packet and signs summary information through the first security module, and sends the summary information to theupgrading server after the summary information is encrypted by using a session key; the upgrade server sends the encrypted upgrade data packet and the signed abstract information to the PLC device; the PLC device decrypts the encrypted abstract information of the upgrade data packet and the signature by using the session key through the second security module to obtain the abstract information ofthe upgrade data packet and the signature; the PLC device verifies the signed abstract information through the second security module and then executes the upgrade data packet; according to the invention, the remote firmware upgrading of the PLC equipment and the confidentiality and integrity of the upgrading data packet are realized.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a PLC remote firmware upgrade system and method. Background technique [0002] PLC (Programmable Logic Controller), that is, programmable logic controller, is a common control product in the field of automation. It uses program memory and system memory. The program memory is used for its internal storage program to perform logic operations, sequence control, User-oriented instructions such as timing, counting, and arithmetic operations, and devices that control various types of machinery or production processes through digital or analog input / output; system memory is used to store operating system firmware programs, system parameters, etc. [0003] With the introduction of PLC in the field of computer science and network-related technologies, the control and computing power of PLC have been greatly improved, and the size of PLC has become smaller and its reliability ...

AI Technical Summary

Problems solved by technology

However, there are still many information security loopholes in PLC. The Stuxnet virus invaded Siemens PLC and destroyed the safe operation of facilities. This is a landmark event in the field of PLC industrial control. The reliable operation of the PLC is very important, and the firmware program of the PLC needs to be updated and upgraded to make up for the existing loopholes; in addition, there are security risks in the network communication between the PLC and the host computer, and the communication information is easily leaked and tampered

Images