A method, device and storage medium for industrial network data isolation

Abstract

The application proposes an industrial network data isolation method, device and storage medium. The method includes: receiving a message sent by a host on the external management network side, and determining the type of the message when the source IP address of the message belongs to the trusted source IP address range; In the case where the type is a command message, determine the danger level of the command message; when the danger level of the command message is lower than the preset danger level, send the command message to the industrial system network side Host; receive the industrial data sent by the industrial system network side host, encrypt the industrial data, and send the encrypted ciphertext and key to the external management network side host so that the external The host on the management network side decrypts the ciphertext; the security level of the external management network is lower than that of the industrial system network. The present application improves the isolation effect of the data isolation of the industrial system.

Description

technical field [0001] The present application relates to the technical field of industrial network security, in particular to an industrial network data isolation method, device and storage medium. Background technique [0002] In the process of industrial production, with the development of automation control and the Internet of Things, it has become a trend in industrial production to interconnect production equipment or smart devices to form an industrial system network. Since the security level of the enterprise industrial system network is extremely high, and the external management network often needs to be connected to the Internet, the security level is very low, and it is always threatened by viruses and malicious software from the Internet side. The industrial system network and the external management network Interconnection and communication are very likely to cause important data in the industrial system network to be stolen, causing major losses to the enterpr...

AI Technical Summary

Problems solved by technology

[0004] In view of the problems existing in the above-mentioned prior art, the embodiment of the present application proposes an industrial network data isolation method, device and storage medium, which solves the problem that the existing data isolation method has low command filtering efficiency and cannot guarantee the security of the filtered message nature, and the lack of protection mechanisms for industrial data

Images