Industrial network information acquisition device, method, monitoring system and storage mediumTechnical Field
The invention relates to the field of industrial networks, in particular to an industrial network information acquisition device, an industrial network information acquisition method, a monitoring system and a storage medium.
Background
Industrial communication networks used in industrial automation and process automation are typically designed as a hierarchical structure. An industrial network architecture in one application is shown in fig. 1. As shown in fig. 1, the industrial network comprises 4 levels: a field layer 1, acontrol layer 2, an operation layer 3, and a management layer 4. Of course, there may be other hierarchical schemes in some industrial networks, including, for example, a field layer and a control layer; as another example, a field layer, a control layer, and a network layer; or, a field layer, a control layer, a monitor layer, etc.
The field layer mainly refers to a device group layer below a device network layer that includes I/O controllers, actuators, sensors, inverters, etc. to perform various industrial operations, such as a device group below an industrial ethernet layer, a field bus system (e.g., Profibus, Modbus, … …) layer, etc. The control layer mainly refers to a layer that performs various control functions such as drive control, execution control, sensor data acquisition and processing, and the like. In the field of industrial networks, a control layer is typically implemented by one or more Programmable Logic Controllers (PLCs). The PLC is an electronic system for digital arithmetic operation, and is designed for industrial environment applications. It uses a kind of programmable memory for storing program therein, executing instructions facing the user such as logic operation, sequence control, timing, counting and arithmetic operation, etc., and controls various types of machinery or production processes by digital or analog input/output. The operation layer and the management layer mainly realize the operations of collecting, managing, configuring and the like of the data of the control layer.
At present, there are two main implementation modes for the PLC of the control layer, one of the two is a dedicated hardware product form (hereinafter referred to as a hard PLC), and the other is a software PCL form. Software PLC (softPLC, also called soft logic SoftLogic) is a programmable logic control system for simulating hard PLC based on PC or server development structure, it has the characteristics of hard PLC in the aspects of function, reliability, speed and fault finding, etc., and can convert standard industrial PC or server equipment into full-function PLC process controller by utilizing software technology. The software PLC integrates the functions of on-off control, analog control, mathematical operation, numerical processing, network communication, PID regulation and the like of a computer and the PLC, provides a powerful instruction set, a fast and accurate scanning period and reliable operation through a multitask control kernel, and is an open structure capable of being connected with various I/O systems and networks. Therefore, a software PLC provides the same functionality as a hard PLC, while providing various advantages of a PC or server environment.
However, whether it is a hard PLC or a software PLC, the connection with the field layer and the upper operation layer and the management layer is realized through corresponding physical interfaces. The PLC does not bridge and route between the control layer network and the field layer network, which is very good for the security and robustness of data control, but it is also difficult to monitor and diagnose the field layer device group in real time.
Disclosure of Invention
In view of this, the embodiment of the present invention provides an industrial network information acquiring apparatus and a monitoring system, and on the other hand, provides an industrial network information acquiring method for acquiring data of a field layer device group or other device groups to be tested, so as to implement real-time monitoring and diagnosis of data of the field layer device group or other device groups to be tested.
The industrial network in the embodiment of the invention comprises: a layer to be tested and a control layer; wherein, the control layer comprises a plurality of software PLCs; the layer to be tested is a field layer or an operation management layer.
The industrial network information acquisition device provided in the embodiment of the invention comprises: the data transparent transmission and acquisition module is used for establishing one-to-one corresponding transmission channels between the plurality of software PLCs and the plurality of layer equipment groups to be detected, transmitting the data messages from the layer equipment groups to be detected to the corresponding software PLCs directly through the transmission channels, and transmitting the data messages from the software PLCs directly to the corresponding layer equipment groups to be detected; while transmitting the data message, acquiring corresponding data from the data message according to a preset data acquisition and processing rule under the condition of not influencing data transmission between the software PLC and the layer equipment group to be detected, and outputting the acquired data after correspondingly processing; and the information gateway module is used for receiving the data from the data transparent transmission and acquisition module, monitoring or diagnosing the requirement according to the received data and providing the corresponding data.
It can be seen from the above solution that, in the embodiment of the present invention, a data transparent transmission and acquisition module is arranged between the software PLC and the layer device group to be detected, and is used to establish a one-to-one corresponding transmission channel between the plurality of software PLCs and the plurality of layer device groups to be detected, when the software PLCs and the layer device groups to be detected transmit data messages through the corresponding transmission channels, corresponding data is acquired from the transmission channels according to a pre-configured data acquisition policy, and the data is correspondingly processed according to a pre-configured data processing policy and then provided to the information gateway module, so that the information gateway module provides corresponding data to corresponding monitoring and diagnostic devices according to external monitoring or diagnostic requirements. Therefore, the industrial network data can be acquired without additional hardware equipment, and the monitoring and diagnosis of the industrial network data can be further realized. In addition, the embodiment of the invention adopts the software PLC to realize the control layer of the industrial network, thereby having higher flexibility and expandability.
In an embodiment, the information gateway module is further configured to configure the data acquisition and processing rule of the data transparent transmission and acquisition module according to the received configuration rule.
In one embodiment, the data transparent transmission and acquisition module includes: each physical interface is used for being connected with at least one device group of the layer to be tested; m virtual interfaces, wherein each virtual interface is used for being connected with one software PLC; wherein M is more than or equal to N is more than or equal to 1; an interface mapping module, configured to establish one-to-one transmission channels between the M virtual interfaces and the N physical interfaces; through the transmission channel, the data message from the equipment group of the layer to be tested is directly transmitted to the corresponding software PLC, and the data message from the software PLC is directly transmitted to the corresponding equipment group of the layer to be tested; the M data acquisition modules correspond to each transmission channel and are used for acquiring corresponding data from the data messages while the data messages are transmitted through the transmission channels according to preset data acquisition rules; and the data processing module is used for receiving the data acquired by each data acquisition module, performing corresponding processing including integration on the received data according to a preset data processing rule and outputting the processed data. Therefore, in the embodiment, the transmission channels corresponding to each other are established between the physical interfaces and the virtual interfaces, so that the data transmission between the software PLC and the layer to be tested can be realized, and the communication data between the software PLC and the layer to be tested can not be influenced, so that the safety of the industrial network can be ensured.
In one embodiment, each data acquisition module is further configured to perform any one or a combination of the following operations on the acquired data according to a preset data processing rule: adding a label representing a data source; adding a time stamp representing the data acquisition time; and carrying out compression processing on the data. In the embodiment, necessary auxiliary information is added to the acquired data, so that the data can be conveniently used in subsequent monitoring and diagnosis.
In one embodiment, the information gateway module is further configured to perform any one or a combination of the following operations on the data from the data transparent transmission and acquisition module according to a preset processing rule: data filtering, label adding, data compression and statistical analysis. In the embodiment, the acquired data is further combed, so that the data can be conveniently used in subsequent monitoring and diagnosis.
In one embodiment, each software PLC of the plurality of software PLCs operates in a separate CPU core; or, the plurality of software PLCs are divided into at least two priority levels, and for the software PLC with the highest priority level, each software PLC runs in a single CPU core; for lower priority software PLCs, at least two software PLCs run in a single CPU core. In the embodiment, the normal operation of each software PLC can be fully ensured, and interference to each other is avoided.
In one embodiment, the information gateway module runs in a separate CPU core. In the embodiment, the information gateway module can be ensured not to influence the normal operation of each software PLC and the data transparent transmission and acquisition module.
The industrial network information monitoring and diagnosing system provided by the embodiment of the invention comprises: the industrial network information acquisition device according to any one of the above embodiments; and the monitoring and diagnosing device is used for sending data monitoring or diagnosing requirements to the industrial network information acquisition device, receiving data provided by the industrial network information acquisition device, and monitoring and diagnosing the equipment group of the layer to be detected in the industrial network according to the data. Accordingly, the industrial network information monitoring and diagnosing system in the embodiment of the invention also has the advantages of the industrial network information acquiring device.
The industrial network information acquisition method provided by the embodiment of the invention comprises the following steps: establishing one-to-one corresponding transmission channels between the plurality of software PLCs and the plurality of layer equipment groups to be tested, directly transmitting the data messages from the layer equipment groups to be tested to the corresponding software PLCs through the transmission channels, and directly transmitting the data messages from the software PLCs to the corresponding layer equipment groups to be tested; acquiring corresponding data from the data message according to a preset data acquisition and processing rule while transparently transmitting the data message, and performing corresponding processing including integration on the acquired data; and storing the processed data so as to provide corresponding data according to the received data monitoring or diagnosis requirement.
It can be seen from the above solution that, in the embodiment of the present invention, a data transparent transmission and acquisition module is arranged between the software PLC and the layer device group to be detected, and is used to establish a one-to-one corresponding transmission channel between the plurality of software PLCs and the plurality of layer device groups to be detected, when the software PLCs and the layer device groups to be detected transmit data messages through the corresponding transmission channels, corresponding data is acquired from the transmission channels according to a pre-configured data acquisition policy, and the data is correspondingly processed according to a pre-configured data processing policy and then provided to the information gateway module, so that the information gateway module provides corresponding data to corresponding monitoring and diagnostic devices according to external monitoring or diagnostic requirements. Therefore, the acquisition of industrial network data can be realized without additional hardware equipment, the monitoring and the diagnosis of the industrial network data can be further realized, and the regular operation such as filtering and the like can be directly carried out on the data messages which are simultaneously transmitted in a transparent mode under the condition that the data communication between the software PLC and the equipment group of the layer to be detected is not influenced, so that the full acquisition of the industrial network data can be realized. In addition, the embodiment of the invention adopts the software PLC to realize the control layer of the industrial network, thereby having higher flexibility and expandability.
In one embodiment, the establishing one-to-one correspondence between the plurality of software PLCs and the plurality of sets of layer devices under test includes: setting M virtual interfaces, wherein each virtual interface is connected with a software PLC; and establishing one-to-one corresponding transmission channels between the M virtual interfaces and N physical interfaces connected with M equipment groups to be tested. In the embodiment, the transmission channels corresponding to each other are established between the physical interfaces and the virtual interfaces, so that the data of the software PLC between the layers to be tested can be transmitted through, and the data of the software PLC between the layers to be tested can not be influenced, thereby ensuring the safety of the industrial network.
In one embodiment, the obtaining, according to a preset data obtaining and processing rule, corresponding data from the data packet while transparently transmitting the data packet includes: and M data acquisition modules are arranged, each data acquisition module corresponds to one transmission channel and is used for acquiring corresponding data from the data messages without influencing data communication between the software PLC and the layer equipment group to be detected while the data messages are transmitted through the transmission channels according to preset data acquisition rules.
In one embodiment, the method further comprises: performing any one or a combination of the following operations on the acquired data: adding a label representing a data source; adding a time stamp representing the data acquisition time; and carrying out compression processing on the data. In the embodiment, necessary auxiliary information is added to the acquired data, so that the data can be conveniently used in subsequent monitoring and diagnosis.
In one embodiment, each software PLC of the plurality of software PLCs operates in a separate CPU core; or, the plurality of software PLCs are divided into at least two priority levels, and for the software PLC with the highest priority level, each software PLC runs in a single CPU core; for lower priority software PLCs, at least two software PLCs run in a single CPU core. In the embodiment, the normal operation of each software PLC can be fully ensured, and interference to each other is avoided.
In one embodiment, the information gateway module runs in a separate CPU core. In the embodiment, the information gateway module can be ensured not to influence the normal operation of each software PLC and the data transparent transmission and acquisition module.
Drawings
The foregoing and other features and advantages of the invention will become more apparent to those skilled in the art to which the invention relates upon consideration of the following detailed description of a preferred embodiment of the invention with reference to the accompanying drawings, in which:
fig. 1 is a diagram of an industrial network architecture in one current application.
Fig. 2 is an exemplary structural diagram of an industrial network information acquisition apparatus according to an embodiment of the present invention.
Fig. 3 is an exemplary structural diagram of a data transparent transmission and acquisition module according to an example of the present invention.
Fig. 4 is an exemplary structural diagram of an industrial network information monitoring and diagnosing system according to an embodiment of the present invention.
Fig. 5 is an exemplary flowchart of an industrial network information obtaining method according to an embodiment of the present invention.
Wherein the reference numbers are as follows:
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is further described in detail by referring to the following examples.
Fig. 2 is a schematic structural diagram of an industrial network information acquisition apparatus according to an embodiment of the present invention. As shown in fig. 2, the control layer of the industrial network architecture in the embodiment of the present invention mainly includes a plurality ofsoftware PLCs 100, and when monitoring and diagnosing a field layer device group is required according to a requirement of information monitoring or diagnosing, the industrial networkinformation obtaining apparatus 200 in the embodiment may include a data transparent transmission and obtainingmodule 210 between thesoftware PLCs 100 and the field layer, and when monitoring and diagnosing an operation management layer device is required, may further include a data transparent transmission and obtainingmodule 220 between thesoftware PLCs 100 and the operation management layer, and further includes aninformation gateway module 230.
For convenience of description, a field layer or an operation management layer adjacent to a control layer where the software PLC100 is located is referred to as a layer under test in this application. Correspondingly, the data transparent transmission andacquisition modules 210 and 220 are configured to establish one-to-one transmission channels between the plurality ofsoftware PLCs 100 and the plurality of layer-to-be-tested device groups, through which data packets from the layer-to-be-tested device groups are directly transmitted to thecorresponding software PLCs 100, and data packets from thesoftware PLCs 100 are directly transmitted to the corresponding layer-to-be-tested device groups; and acquiring corresponding data from the data message according to a preset data acquisition and processing rule while transparently transmitting the data message without influencing data communication between the software PLC and the layer equipment group to be tested, and outputting the acquired data to the information gateway module in a unidirectional way after correspondingly processing the acquired data. In this embodiment, the data obtaining rule may include a data filtering rule or a data discarding rule.
Theinformation gateway module 230 is configured to receive the data from the data transparent transmission andacquisition modules 210 and 220, and provide corresponding data according to the received data monitoring or diagnosis requirement. Further, theinformation gateway module 230 is further configured to configure the data obtaining and processing rules of the data transparent transmission and obtainingmodules 210 and 220 according to the received configuration rules. The configuration rule can come from a user with configuration authority. In addition, theinformation gateway module 230 may further be configured to perform one or more operations of data filtering, tagging, data compression, statistical analysis, and the like on the data from the data transparent transmission andacquisition modules 210 and 220 according to a preset processing rule.
In this embodiment, the data stream from the industrial network can only be output to theinformation gateway module 230 in a single direction, and theinformation gateway module 230 and the data transparent transmission andacquisition modules 210 and 220 do not change the data stream between the software PLC and the device group on the layer to be tested.
In a specific implementation, the data transparent transmission andacquisition modules 210 and 220 may have a variety of internal implementations. Fig. 3 shows a schematic structural diagram of a data transparent transmission and acquisition module in an example. As shown in fig. 3, the data transparent transmission and acquisition module may include: nphysical interfaces 211, Mvirtual interfaces 212, aninterface mapping module 213, Mdata acquisition modules 214, and adata processing module 215.
Wherein eachphysical interface 211 is configured to connect with at least one device group of layers under test.
Eachvirtual interface 212 is used to interface with a software PLC. Wherein M is more than or equal to N is more than or equal to 1.
Theinterface mapping module 213 is configured to establish one-to-one transmission channels between the Mvirtual interfaces 212 and the Nphysical interfaces 211; through the transmission channel, the data messages from the equipment group of the layer to be tested are directly transmitted to the corresponding software PLC100, and the data messages from the software PLC100 are directly transmitted to the corresponding equipment group of the layer to be tested.
Eachdata acquisition module 214 corresponds to a transmission channel, and is configured to acquire corresponding data from the data packet without affecting data communication between the software PLC and the layer device group to be detected while the transmission channel transparently transmits the data packet according to a preset data acquisition rule. In this embodiment, when acquiring the corresponding data, thedata acquisition module 214 does not change the data stream between the software PLC100 and the layer device group to be tested, and does not affect the transmission thereof, but backups the data stream between the software PLC100 and the layer device group to be tested as its own input, and performs necessary filtering or information processing on the data stream to acquire the corresponding data. Further, eachdata obtaining module 214 may be further configured to add a tag indicating a data source to the obtained data according to a preset data processing rule; adding a time stamp representing the data acquisition time; one or more of compression processing and the like are performed on the data.
Thedata processing module 215 is configured to receive the data acquired by eachdata acquiring module 214, perform corresponding processing including integration on the received data according to a preset data processing rule, and output the processed data. In this embodiment, thedata processing module 215 may be a multiplexer module, for example, which may integrate, classify or filter the data from thedata acquisition module 214.
In this embodiment, thedata processing module 215 may send the output to theinformation gateway module 230 through themonitoring interface 216. Themonitor interface 216 may be an ethernet interface. Through theethernet interface 216, some existing monitoring software, such as Wireshark, can analyze the data flow through themonitoring interface 216.
In the embodiment of the present invention, the plurality ofsoftware PLCs 100 may operate on the same PC or server, and in order to ensure the control efficiency of each software PLC100 and avoid interference with each other, each software PLC100 of the plurality ofsoftware PLCs 100 may operate in a single CPU core. Or, the plurality of software PLCs can be divided into at least two priority levels, and for the software PLC with the highest priority level, each software PLC runs in a single CPU core; for lower priority software PLCs, then at least two software PLCs may run in a single CPU core.
In addition, in order to avoid affecting the plurality ofsoftware PLCs 100 and the data pass-through andacquisition modules 210 and 220, theinformation gateway module 230 may also operate in a single CPU core.
Fig. 4 is a schematic structural diagram of an industrial network information monitoring and diagnosing system according to an embodiment of the present invention. As shown in fig. 4, the system may include: the industrial networkinformation acquisition apparatus 200 and themonitoring diagnosis apparatus 300 shown in fig. 2.
The monitoring and diagnosingdevice 300 is configured to send a data monitoring or diagnosing requirement to the industrial network information obtaining device, receive data provided by the industrial network information obtaining device, and monitor and diagnose a layer device group to be tested in the industrial network according to the data.
Fig. 5 is an exemplary flowchart of an industrial network information obtaining method according to an embodiment of the present invention. The industrial network includes: a field layer and a layer to be tested; wherein, the control layer comprises a plurality of software PLCs; the layer to be tested is a field layer or an operation management layer. The method in this embodiment may be executed in the above-mentioned industrial network information acquisition device, and for details that are not disclosed in the method in this embodiment, reference may be made to the corresponding description of the above-mentioned industrial network information acquisition device. As shown in fig. 5, the method may include the steps of:
step 501, establishing one-to-one corresponding transmission channels between the plurality of software PLCs and the plurality of layer equipment groups to be tested, directly transmitting the data messages from the layer equipment groups to be tested to the corresponding software PLCs through the transmission channels, and directly transmitting the data messages from the software PLCs to the corresponding layer equipment groups to be tested.
In the step, M virtual interfaces can be set, and each virtual interface is connected with one software PLC; and establishing one-to-one corresponding transmission channels between the M virtual interfaces and N physical interfaces connected with M equipment groups to be tested.
Step 502, while transmitting the data message, according to the preset data acquisition and processing rule, acquiring the corresponding data from the data message, and performing corresponding processing including integration on the acquired data.
In this step, M data acquisition modules and one data processing module may be provided, where each data acquisition module corresponds to one transmission channel, and is configured to acquire corresponding data from the data packet while the transmission channel transparently transmits the data packet according to a preset data acquisition rule. Further, each data acquisition module may further perform one or more of operations of adding a tag indicating a data source to the acquired data, adding a time stamp indicating a data acquisition time, compressing the data, and the like. And then, the data processing module integrates, classifies or filters the data from the data acquisition modules.
Step 503, storing the processed data so as to provide the corresponding data according to the received data monitoring or diagnosis requirement.
In this step, an information gateway module may be configured to store the data processed instep 502. Further, instep 503, the data obtaining and processing rule of the data transparent transmission and obtaining module may be configured according to the received configuration rule. The configuration rule can come from a user with configuration authority. In addition,step 503 may be further configured to perform one or more of data filtering, tagging, data compression, statistical analysis, and the like on the data processed instep 502 according to a preset processing rule.
Similarly, in the embodiment of the method of the present invention, the plurality ofsoftware PLCs 100 may run on the same PC or server, and in order to ensure the control efficiency of thesoftware PLCs 100 and avoid interference with each other, each software PLC100 of the plurality ofsoftware PLCs 100 may run in a separate CPU core. Or, the plurality of software PLCs can be divided into at least two priority levels, and for the software PLC with the highest priority level, each software PLC runs in a single CPU core; for lower priority software PLCs, then at least two software PLCs may run in a single CPU core.
In addition, in order to avoid affecting the plurality ofsoftware PLCs 100 and the data pass-through andacquisition modules 210 and 220, theinformation gateway module 230 may also operate in a single CPU core.
The present invention also provides a machine-readable storage medium storing instructions for causing a machine to perform the industrial network information acquisition method as described herein. Specifically, a system or an apparatus equipped with a storage medium on which software program codes that realize the functions of any of the above-described embodiments are stored may be provided, and a computer (or a CPU or MPU) of the system or the apparatus is caused to read out and execute the program codes stored in the storage medium.
In this case, the program code itself read from the storage medium can realize the functions of any of the above-described embodiments, and thus the program code and the storage medium storing the program code constitute a part of the present invention.
Examples of the storage medium for supplying the program code include a flexible disk, a hard disk, a magneto-optical disk, an optical disk (e.g., CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD + RW), a magnetic tape, a nonvolatile memory card, a ROM, a PC, a cellular phone, and various smart devices. Alternatively, the program code may be downloaded from a server computer via a communications network.
Further, it should be clear that the functions of any one of the above-described embodiments may be implemented not only by executing the program code read out by the computer, but also by causing an operating system or the like operating on the computer to perform a part or all of the actual operations based on instructions of the program code.
Further, it is to be understood that the program code read out from the storage medium is written to a memory provided in an expansion board inserted into the computer or to a memory provided in an expansion unit connected to the computer, and then causes a CPU or the like mounted on the expansion board or the expansion unit to perform part or all of the actual operations based on instructions of the program code, thereby realizing the functions of any of the above-described embodiments.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that fall within the spirit and principle of the present invention are intended to be included therein.