CN115079648A - Intelligent industrial control system - Google Patents

Abstract

The invention provides an intelligent industrial control system, which comprises an edge control layer, a data processing layer and a data processing layer, wherein the edge control layer comprises: the data acquisition module is used for respectively acquiring equipment data corresponding to each industrial equipment; the edge calculation module is used for receiving the equipment data and analyzing the equipment data respectively so as to extract key data from the equipment data and output the key data, and performing edge calculation on other equipment data except the key data to obtain corresponding calculation results and output the calculation results; the cloud service layer is used for receiving the key data and the operation result output by the edge calculation module, respectively processing the key data and the operation result to obtain corresponding decision information and outputting the decision information to the edge control layer; the edge calculation module is also used for controlling and managing the industrial equipment according to the decision information or the operation result. The method has the advantages that the device data can be rapidly analyzed by utilizing the edge algorithm to obtain the operation result so as to control the industrial device, and only a small amount of necessary key data is transmitted to the cloud service layer to be analyzed so as to obtain the decision information.

Description

Translated fromChinese

一种智能工业控制系统An intelligent industrial control system

技术领域technical field

本发明涉及工业控制技术领域，尤其涉及一种智能工业控制系统。The invention relates to the technical field of industrial control, in particular to an intelligent industrial control system.

背景技术Background technique

工业控制系统(Industrial Control Systems,ICS,简称工控系统)是由各种自动化控制组件以及用于对实时数据进行采集监测的过程控制组件共同构成的为了确保工业基础设施自动化运行、过程控制及监控的业务流程管控系统。Industrial Control Systems (ICS, industrial control system for short) is composed of various automation control components and process control components used to collect and monitor real-time data. In order to ensure the automatic operation, process control and monitoring of industrial infrastructure. Business process control system.

随着计算机技术、通信技术和控制技术的发展，工业控制系统的结构也从最初的CCS(Central Computer System，计算机集中控制系统)，到第二代的DCS(DistributedControl System，分散控制系统)，发展到现在流行的FCS(Fieldbus Control System，现场总线控制系统)，当前，在国内电力、水利、水务、智能制造等行业普遍使用的工业控制系统为SCADA(Supervisory Control And DataAequisition，数据采集与监视控制系统)和基于PLC的FCS(现场总线控制系统)。With the development of computer technology, communication technology and control technology, the structure of industrial control system has also developed from the original CCS (Central Computer System, computer centralized control system) to the second generation DCS (Distributed Control System, decentralized control system). Now the popular FCS (Fieldbus Control System, field bus control system), at present, the industrial control system commonly used in the domestic electric power, water conservancy, water affairs, intelligent manufacturing and other industries is SCADA (Supervisory Control And Data Aequisition, data acquisition and monitoring control system) ) and PLC-based FCS (Fieldbus Control System).

但是上述的工业控制系统仍具有以下问题：However, the above-mentioned industrial control system still has the following problems:

1)网络安全和带宽问题，将Internet及其相关技术集成到现有控制系统中，将敏感的数据信息直接暴露在公网中，会引发系统及数据的安全风险问题；1) Network security and bandwidth issues. Integrating the Internet and its related technologies into the existing control system and directly exposing sensitive data information to the public network will cause system and data security risks;

2)大量数据在网络中传输，会造成网络带宽资源紧张，以致系统延迟，影响系统的实时性；2) A large amount of data is transmitted in the network, which will cause the shortage of network bandwidth resources, so that the system delays and affects the real-time performance of the system;

3)采用有线方式，虽然工业控制可靠性高，但灵活性差、效率低，不适用复杂的工业应用场景；3) The wired method is adopted, although the reliability of industrial control is high, but the flexibility and efficiency are low, and it is not suitable for complex industrial application scenarios;

4)缺乏高效能的控制任务调度算法的支持；4) Lack of high-efficiency control task scheduling algorithm support;

5)采用组态软件功能设计，数据采集采用轮询的方式进行，会导致数据采集不全面、数据容易出错。5) The function design of the configuration software is adopted, and the data collection is carried out by means of polling, which will lead to incomplete data collection and error-prone data.

发明内容SUMMARY OF THE INVENTION

针对现有技术中存在的问题，本发明提供一种智能工业控制系统，配置于一工业现场，所述工业现场中设置有多个工业设备；Aiming at the problems existing in the prior art, the present invention provides an intelligent industrial control system, which is configured in an industrial site, and a plurality of industrial equipments are arranged in the industrial site;

则所述智能工业控制系统包括:Then the intelligent industrial control system includes:

一边缘控制层，包括：An edge control layer, including:

数据采集模块，用于分别采集各所述工业设备对应的设备数据；a data acquisition module, used for separately collecting equipment data corresponding to each of the industrial equipment;

边缘计算模块，通过一数据传输模块连接所述数据采集模块，用于接收所述数据传输模块传输的所述设备数据，并分别对各所述设备数据进行分析，以由所述设备数据中提取出关键数据输出，以及将对除所述关键数据之外的其他所述设备数据进行边缘运算得到对应的运算结果输出；an edge computing module, connected to the data acquisition module through a data transmission module, for receiving the device data transmitted by the data transmission module, and analyzing each of the device data separately to extract the device data from the device data Outputting key data output, and performing edge operations on other described device data except the key data to obtain the corresponding operation result output;

一云端服务层，运行于所述边缘控制层的上方，用于接收所述边缘计算模块输出的所述关键数据和所述运算结果，根据所述关键数据和所述运算结果分别处理得到对应的决策信息并输出至所述边缘控制层；A cloud service layer, running above the edge control layer, is used to receive the key data and the operation result output by the edge computing module, and process the key data and the operation result respectively to obtain the corresponding Decision information and output to the edge control layer;

所述边缘计算模块还用于根据所述决策信息或所述运算结果控制管理对应的所述工业设备。The edge computing module is further configured to control and manage the corresponding industrial equipment according to the decision information or the operation result.

优选的，各所述工业设备为生产类设备、环境感知类设备、视频监控类设备和门禁管理类设备，则所述数据采集模块包括：Preferably, each of the industrial equipment is production equipment, environment perception equipment, video surveillance equipment and access control management equipment, and the data acquisition module includes:

至少一生产数据采集单元，用于采集所述生产类设备对应的所述设备数据；at least one production data collection unit, configured to collect the equipment data corresponding to the production equipment;

至少一环境数据采集单元，用于采集所述环境感知类设备对应的所述设备数据；at least one environmental data collection unit, configured to collect the device data corresponding to the environment-aware device;

至少一视频数据采集单元，用于采集所述视频监控类设备对应的所述设备数据；at least one video data collection unit, used to collect the device data corresponding to the video surveillance equipment;

至少一门禁数据采集单元，用于采集所述门禁管理类设备对应的所述设备数据。At least one access control data collection unit is used to collect the device data corresponding to the access control management type device.

优选的，所述数据传输模块包括：Preferably, the data transmission module includes:

至少一第一传输单元，用于传输所述生产数据采集单元输出的所述设备数据；at least one first transmission unit for transmitting the equipment data output by the production data acquisition unit;

至少一第二传输单元，用于分别传输所述环境数据采集单元、所述视频数据采集单元和所述门禁数据采集单元输出的所述设备数据。At least one second transmission unit, configured to respectively transmit the device data output by the environmental data collection unit, the video data collection unit and the access control data collection unit.

优选的，所述第一传输单元为PLC设备。Preferably, the first transmission unit is a PLC device.

优选的，所述第二传输单元为动环主机。Preferably, the second transmission unit is a moving ring host.

优选的，所述边缘计算模块为边缘网关，所述边缘网关采用多核的组态数据获取方式接收所述数据传输模块传输的所述设备数据。Preferably, the edge computing module is an edge gateway, and the edge gateway uses a multi-core configuration data acquisition method to receive the device data transmitted by the data transmission module.

优选的，所述云端服务层内设有一云端服务器，所述云端服务器用于对所述关键数据进行分析得到对应的所述决策信息并输出至所述边缘控制层，以及判断所述运算结果是否存在异常并在所述运算结果存在异常时对所述运算结果进行分析得到对应的所述决策信息并输出至所述边缘控制层。Preferably, the cloud service layer is provided with a cloud server, and the cloud server is used to analyze the key data to obtain the corresponding decision information and output it to the edge control layer, and to determine whether the operation result is not When there is an abnormality in the operation result, the operation result is analyzed to obtain the corresponding decision information and output to the edge control layer.

优选的，各所述设备数据分别包括对应的所述工业设备的权限级别，则所述边缘计算模块包括一数据处理单元，用于针对每个所述设备数据，判断所述设备数据对应的所述权限级别是否处于预先设定的级别范围内并在所述权限级别处于所述级别范围内时对所述设备数据进行边缘运算得到对应的运算结果，输出至所述云端服务层；或Preferably, each of the device data includes the corresponding permission level of the industrial device, and the edge computing module includes a data processing unit for determining the corresponding device data for each device data. Whether the permission level is within a preset level range, and when the permission level is within the level range, perform edge computing on the device data to obtain a corresponding computing result, and output it to the cloud service layer; or

在所述权限级别未处于所述级别范围内时，将所述设备数据作为所述关键数据输出至所述云端服务层。When the permission level is not within the level range, the device data is output to the cloud service layer as the key data.

优选的，所述边缘计算模块包括：Preferably, the edge computing module includes:

一第一控制单元，用于根据所述运算结果生成一即时决策信息并根据所述即时决策信息对所述设备数据对应的所述工业设备进行控制管理；以及a first control unit, configured to generate real-time decision information according to the calculation result and to control and manage the industrial equipment corresponding to the equipment data according to the real-time decision information; and

在接收到所述云端服务层反馈的关联所述运算结果的所述决策信息时，根据所述决策信息对所述设备数据对应的所述工业设备进行控制管理；When receiving the decision information related to the operation result fed back by the cloud service layer, control and manage the industrial equipment corresponding to the equipment data according to the decision information;

一第二控制单元，用于根据所述云端服务层输出的关联所述关键数据的所述决策信息对所述关键数据对应的所述工业设备进行控制管理。A second control unit, configured to control and manage the industrial equipment corresponding to the key data according to the decision information associated with the key data output by the cloud service layer.

优选的，所述数据处理单元输出所述关键数据和所述运算结果至所述云端服务层之前输出一验证信号至所述云端服务层，所述云端服务层根据所述验证信号输出对应的凭证，则所述边缘计算模块还包括一通信保护单元，连接所述数据处理单元，包括：Preferably, the data processing unit outputs a verification signal to the cloud service layer before outputting the key data and the operation result to the cloud service layer, and the cloud service layer outputs a corresponding certificate according to the verification signal , the edge computing module further includes a communication protection unit, connected to the data processing unit, including:

一第一保护子单元，用于将所述凭证与预先下载的所述云端服务层对应的服务器信息进行对比并在所述凭证与所述服务器信息相符时控制所述数据处理单元与所述云端服务层进行数据传输；以及A first protection sub-unit, configured to compare the certificate with the pre-downloaded server information corresponding to the cloud service layer, and control the data processing unit and the cloud when the certificate matches the server information the service layer for data transfer; and

在所述凭证与所述服务器信息不符时控制所述数据处理单元停止与所述云端服务层进行数据传输；Controlling the data processing unit to stop data transmission with the cloud service layer when the credential does not match the server information;

一第二保护子单元，用于通过国密SM2加密技术对所述关键数据和所述运算结果进行加密处理并控制所述数据处理单元将加密后的所述关键数据和所述运算结果输出至所述云端服务层；A second protection subunit, configured to encrypt the key data and the operation result through the national secret SM2 encryption technology and control the data processing unit to output the encrypted key data and the operation result to the cloud service layer;

一第三保护子单元，用于配置一防火墙体系架构对所述数据处理单元的网络通信行为进行监控并在发现恶意通信行为时将所述恶意通信行为上报至所述云端服务层。a third protection sub-unit, configured to configure a firewall architecture to monitor the network communication behavior of the data processing unit and report the malicious communication behavior to the cloud service layer when malicious communication behavior is found.

上述技术方案具有如下优点或有益效果：The above-mentioned technical scheme has the following advantages or beneficial effects:

1)本系统中的通信保护单元采用“三层安全防护”的网络防护策略，保障系统免遭网络攻击。确保系统的安全稳定，同时保障关键数据和运算结果在传输过程中的安全性、私密性、完整性；1) The communication protection unit in this system adopts the network protection strategy of "three-layer security protection" to protect the system from network attacks. Ensure the security and stability of the system, and at the same time ensure the security, privacy and integrity of key data and operation results during the transmission process;

2)本系统中的边缘计算模块只将必要的少量关键数据传到云端服务层，既可降低云端服务层处理数据的压力，也可减少对网络带宽的依赖，可快速的响应用户需求，提高时效性。2) The edge computing module in this system only transmits a small amount of necessary key data to the cloud service layer, which can not only reduce the pressure on the cloud service layer to process data, but also reduce the dependence on network bandwidth, and can quickly respond to user needs and improve performance. Timeliness.

3)本系统中的边缘控制层通过无线网络分别与云端服务层和工业设备建立通信连接，灵活性高、效率高，且能够适应复杂的工业应用场景；3) The edge control layer in this system establishes a communication connection with the cloud service layer and industrial equipment respectively through the wireless network, which has high flexibility, high efficiency, and can adapt to complex industrial application scenarios;

4,)本系统中的边缘计算模块部署有高效的边缘算法，可以快速根据设备数据分析得到运算结果；4,) The edge computing module in this system is deployed with efficient edge algorithms, which can quickly analyze and obtain operation results according to device data;

5)本系统中的边缘计算模块为边缘网关，并采用多核的组态数据获取方式并发获取设备数据，弥补了传统组态软件由于轮询机制导致的数据采集不全面、数据容易出错的问题。5) The edge computing module in this system is an edge gateway, and uses a multi-core configuration data acquisition method to acquire device data concurrently, which makes up for the problems of incomplete data acquisition and easy data error caused by the polling mechanism of traditional configuration software.

附图说明Description of drawings

图1为本发明的较佳的实施例中，本系统的结构原理图；1 is a schematic diagram of the structure of the system in a preferred embodiment of the present invention;

图2为本发明的较佳的实施例中，数据采集模块的结构原理图；FIG. 2 is a schematic structural diagram of a data acquisition module in a preferred embodiment of the present invention;

图3为本发明的较佳的实施例中，数据传输模块的结构原理图；3 is a schematic structural diagram of a data transmission module in a preferred embodiment of the present invention;

图4为本发明的较佳的实施例中，边缘计算模块的结构原理图；4 is a schematic structural diagram of an edge computing module in a preferred embodiment of the present invention;

图5为本发明的较佳的实施例中，通信保护单元的结构原理图。FIG. 5 is a schematic structural diagram of a communication protection unit in a preferred embodiment of the present invention.

具体实施方式Detailed ways

下面结合附图和具体实施例对本发明进行详细说明。本发明并不限定于该实施方式，只要符合本发明的主旨，则其他实施方式也可以属于本发明的范畴。The present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. The present invention is not limited to this embodiment, and other embodiments may belong to the scope of the present invention as long as it conforms to the gist of the present invention.

本发明的较佳的实施例中，基于现有技术中存在的上述问题，现提供一种智能工业控制系统，配置于一工业现场，工业现场中设置有多个工业设备；In a preferred embodiment of the present invention, based on the above-mentioned problems existing in the prior art, an intelligent industrial control system is now provided, which is configured in an industrial site, and the industrial site is provided with a plurality of industrial equipment;

则智能工业控制系统如图1所示，包括:The intelligent industrial control system is shown in Figure 1, including:

一边缘控制层1，包括：An edge control layer 1, comprising:

数据采集模块11，用于分别采集各工业设备对应的设备数据；Thedata collection module 11 is used to collect the equipment data corresponding to each industrial equipment respectively;

边缘计算模块12，通过一数据传输模块13连接数据采集模块11，用于接收数据传输模块12传输的设备数据，并分别对各设备数据进行分析，以由设备数据中提取出关键数据输出，以及将对除关键数据之外的其他设备数据进行边缘运算得到对应的运算结果输出；Theedge computing module 12 is connected to thedata acquisition module 11 through adata transmission module 13 for receiving the device data transmitted by thedata transmission module 12, and analyzes the data of each device respectively, so as to extract the key data output from the device data, and The edge operation will be performed on other device data except key data to obtain the corresponding operation result output;

一云端服务层2，运行于边缘控制层1的上方，用于接收边缘计算模块12输出的关键数据和运算结果，根据关键数据和运算结果分别处理得到对应的决策信息并输出至边缘控制层1；Acloud service layer 2, running above the edge control layer 1, is used to receive the key data and operation results output by theedge computing module 12, process the corresponding decision information according to the key data and operation results, and output them to the edge control layer 1 ;

边缘计算模块12还用于根据决策信息或运算结果控制管理对应的工业设备。Theedge computing module 12 is also used to control and manage the corresponding industrial equipment according to the decision information or the operation result.

具体地，本实施例中，本系统采用信息化和工业化高层次深度融合的技术路线，以信息化带动工业化，以工业化促进信息化，通过边缘计算、网络通信、大数据、物联网、云计算等新兴信息技术，搭建一个新型的智能工业控制系统，利用信息技术加强系统内各个模块间的互联互通，实现深度网络化、智能化、融合化发展，从而改变传统的生产模式，提高管理水平和生产效率。Specifically, in this embodiment, the system adopts the technical route of high-level and deep integration of informatization and industrialization, drives industrialization with informatization, and promotes informatization with industrialization, through edge computing, network communication, big data, Internet of Things, cloud computing and other emerging information technology, build a new type of intelligent industrial control system, use information technology to strengthen the interconnection and interoperability of various modules in the system, and realize the development of deep networking, intelligence and integration, so as to change the traditional production mode, improve the management level and Productivity.

具体地，本实施例中，本系统将边缘计算模块12作为整个智能工业控制系统的“大脑”。于边缘计算模块12内部属高效的边缘算法，将系统部分数据处理能力前置到边缘控制层1内的边缘计算模块12，只将少量的设备数据作为关键数据传输至云端服务层2进行分析处理，可有效减轻云端服务层2处理数据的压力，并减少对网络带宽的依赖，提高时效性。Specifically, in this embodiment, the system uses theedge computing module 12 as the "brain" of the entire intelligent industrial control system. Theedge computing module 12 is an efficient edge algorithm, and part of the data processing capability of the system is preloaded to theedge computing module 12 in the edge control layer 1, and only a small amount of device data is transmitted as key data to thecloud service layer 2 for analysis and processing. , which can effectively reduce the pressure oncloud service layer 2 to process data, reduce the dependence on network bandwidth, and improve timeliness.

优选的，本系统还支持多网融合、网络自动切换、网络通信规则设定等通信规则操作，以满足不同工业环境及应用场景下网络的需求，提高系统的通用性、稳定性、可靠性。Preferably, the system also supports communication rule operations such as multi-network integration, automatic network switching, and network communication rule setting, so as to meet the network requirements in different industrial environments and application scenarios, and improve the versatility, stability and reliability of the system.

优选的，边缘计算模块12可以通过云端服务层2进行远程部署算法库、安全防护策略、多网融合策略等算法策略的设置，提供边缘侧的边缘计算能力，实现实时性设备数据的边缘处理。Preferably, theedge computing module 12 can set algorithm strategies such as remote deployment algorithm library, security protection strategy, multi-network integration strategy, etc. through thecloud service layer 2, provide the edge computing capability on the edge side, and realize the edge processing of real-time device data.

具体地，本实施例中，边缘控制层1通过网络(有线、4G/5G、NB等)与云端服务层2内的应用服务通信以完成工业生产的远程监控、管理以及服务。Specifically, in this embodiment, the edge control layer 1 communicates with the application service in thecloud service layer 2 through the network (wired, 4G/5G, NB, etc.) to complete the remote monitoring, management and service of industrial production.

本发明的较佳的实施例中，各工业设备为生产类设备、环境感知类设备、视频监控类设备和门禁管理类设备，则数据采集模块11如图2所示，包括：In a preferred embodiment of the present invention, each industrial equipment is production equipment, environment perception equipment, video surveillance equipment and access control management equipment, then thedata acquisition module 11 is shown in FIG. 2 and includes:

至少一生产数据采集单元111，用于采集生产类设备对应的设备数据；At least one production data collection unit 111, used to collect equipment data corresponding to production equipment;

至少一环境数据采集单元112，用于采集环境感知类设备对应的设备数据；at least one environmental data collection unit 112, configured to collect the device data corresponding to the environmental perception device;

至少一视频数据采集单元113，用于采集视频监控类设备对应的设备数据；At least one video data collection unit 113, used to collect device data corresponding to video surveillance equipment;

至少一门禁数据采集单元114，用于采集门禁管理类设备对应的设备数据。At least one access controldata collection unit 114 is configured to collect device data corresponding to access control management devices.

具体地，本实施例中，考虑到工业现场的工业设备大致分为生产类设备、环境感知类设备、视频监控类设备和门禁管理类设备，因此本实施例中在数据采集模块11内设置四种数据采集单元进行点对点、端到端的设备数据采集，具体操作时，通过生产数据采集单元111采集生产类设备对应的设备数据，通过环境数据采集单元112采集环境感知类设备对应的设备数据，通过视频数据采集单元113采集视频监控类设备对应的设备数据，通过门禁数据采集单元114采集门禁管理类设备对应的设备数据，能够保证设备数据采集的有序性，避免发生采集错误。Specifically, in this embodiment, considering that the industrial equipment on the industrial site is roughly divided into production equipment, environment perception equipment, video surveillance equipment, and access control management equipment, in this embodiment, four sets of four are set in thedata acquisition module 11. The various data collection units perform point-to-point, end-to-end equipment data collection. During specific operations, the production data collection unit 111 collects the equipment data corresponding to the production equipment, the environmental data collection unit 112 collects the equipment data corresponding to the environmental perception equipment, and the The video data collection unit 113 collects equipment data corresponding to the video surveillance equipment, and the access controldata collection unit 114 collects equipment data corresponding to the access control management equipment, which can ensure the orderliness of equipment data collection and avoid collection errors.

优选的，通过采集生产类设备、环境感知类设备、视频监控类设备和门禁管理类设备的设备数据可以帮助完成工业现场的全面感知与控制管理，为工业生产的无人值守、智慧化运营提供设备信息与控制管理的基础数据支撑。Preferably, by collecting the equipment data of production equipment, environmental perception equipment, video surveillance equipment and access control management equipment, it can help complete the comprehensive perception and control management of the industrial site, and provide unattended and intelligent operation of industrial production. Basic data support for equipment information and control management.

优选的，数据采集模块11内的数据采集单元本身就是各类传感器，用于将工业现场工业设备的运行状态、所处压力、所处液位、运动图像等设备数据转化为标准的PLC信号或动环主机的可控信号进行输出。Preferably, the data acquisition unit in thedata acquisition module 11 itself is a variety of sensors, which are used to convert the equipment data such as the operating status, pressure, liquid level, moving image, etc. of the industrial equipment on the industrial site into standard PLC signals or The controllable signal of the moving ring host is output.

优选的，标准的PLC信号或动环主机的可控信号为模拟量信号、数字量信号、视频信号等。Preferably, the standard PLC signal or the controllable signal of the moving ring host is an analog signal, a digital signal, a video signal, and the like.

本发明的较佳的实施例中，如图3所示，数据传输模块13包括：In a preferred embodiment of the present invention, as shown in FIG. 3 , thedata transmission module 13 includes:

至少一第一传输单元131，用于传输生产数据采集单元111输出的设备数据；at least onefirst transmission unit 131 for transmitting the device data output by the production data collection unit 111;

至少一第二传输单元132，用于分别传输环境数据采集单元112、视频数据采集单元113和门禁数据采集单元114输出的设备数据。At least onesecond transmission unit 132 is used to transmit the device data output by the environmental data collection unit 112 , the video data collection unit 113 and the access controldata collection unit 114 respectively.

具体地，本实施例中，数据传输模块13与边缘计算模块12之间的连接采用标准的物联网接入方式，比如modbus、opcua等。Specifically, in this embodiment, the connection between thedata transmission module 13 and theedge computing module 12 adopts a standard Internet of Things access mode, such as modbus, opcua, and the like.

本发明的较佳的实施例中，第一传输单元131为PLC设备。In a preferred embodiment of the present invention, thefirst transmission unit 131 is a PLC device.

具体地，本实施例中，采用PLC设备作为第一传输单元131，用于将生产数据采集单元111接入边缘计算模块12并建立数据通信，帮助完成对工业现场生产类设备的数据采集与控制管理。Specifically, in this embodiment, a PLC device is used as thefirst transmission unit 131, which is used to connect the production data acquisition unit 111 to theedge computing module 12 and establish data communication to help complete the data acquisition and control of industrial field production equipment. manage.

本发明的较佳的实施例中，第二传输单元132为动环主机。In a preferred embodiment of the present invention, thesecond transmission unit 132 is a moving ring host.

具体地，本实施例中，采用动环主机作为第二传输单元132，用于将环境数据采集单元112、视频数据采集单元113、门禁数据采集单元114接入边缘计算模块12并建立数据通信，帮助完成对工业现场环境感知类设备、视频监控类设备和门禁管理类设备的数据采集与控制管理。Specifically, in this embodiment, the dynamic ring host is used as thesecond transmission unit 132, which is used to connect the environmental data collection unit 112, the video data collection unit 113, and the access controldata collection unit 114 to theedge computing module 12 and establish data communication, Help complete the data collection and control management of industrial site environment perception equipment, video surveillance equipment and access control management equipment.

本发明的较佳的实施例中，边缘计算模块12为边缘网关，边缘网关采用多核的组态数据获取方式接收数据传输模块13传输的设备数据。In a preferred embodiment of the present invention, theedge computing module 12 is an edge gateway, and the edge gateway uses a multi-core configuration data acquisition method to receive the device data transmitted by thedata transmission module 13 .

具体地，本实施例中，采用边缘网关作为边缘计算模块12成为本系统的“大脑”，通过边缘网关对设备数据进行实时分析、智能化处理以及边缘算法处理，只将少量的设备数据作为关键数据上传到云端服务层2，提高数据处理的合理性和效率。Specifically, in this embodiment, the edge gateway is used as theedge computing module 12 to become the "brain" of the system. The edge gateway performs real-time analysis, intelligent processing and edge algorithm processing on device data, and only a small amount of device data is used as the key. The data is uploaded to thecloud service layer 2 to improve the rationality and efficiency of data processing.

优选的，传统的组态软件采用轮询机制对设备数据进行采集，会导致数据采集不全面、数据容易出错的问题，而本实施例中的边缘网关采用多核的组态数据获取方式并发获取设备数据，能够有效解决数据采集不全面、数据容易出错的问题。Preferably, the traditional configuration software uses a polling mechanism to collect device data, which will result in incomplete data collection and data error-prone problems, while the edge gateway in this embodiment uses a multi-core configuration data acquisition method to concurrently acquire devices It can effectively solve the problems of incomplete data collection and error-prone data.

优选的，假设工业现场存在100个工业设备，那么传统的组态软件采用轮询机制会先询问第一个工业设备是否有设备数据，当有设备数据的时候获取该设备数据，然后询问第二个工业设备，当没有设备数据的时候也转向询问第二个工业设备，直至询问完第100个工业设备再重复一轮回，而本实施例中的边缘网关采用多核的组态数据获取方式，即同时且持续地询问100个工业设备是否有设备数据，当有设备数据的时候获取该设备数据。Preferably, assuming that there are 100 industrial devices on the industrial site, the traditional configuration software uses a polling mechanism to first ask whether the first industrial device has device data, and when there is device data, obtain the device data, and then ask the second If there is no device data, the second industrial device will be inquired, and the round will be repeated until the 100th industrial device is inquired. The edge gateway in this embodiment adopts the multi-core configuration data acquisition method, that is, At the same time and continuously, 100 industrial devices are asked whether there is device data, and the device data is obtained when there is device data.

本发明的较佳的实施例中，云端服务层2内设有一云端服务器21，云端服务器21用于对关键数据进行分析得到对应的决策信息并输出至边缘控制层1，以及判断运算结果是否存在异常并在运算结果存在异常时对运算结果进行分析得到对应的决策信息并输出至边缘控制层1。In a preferred embodiment of the present invention, thecloud service layer 2 is provided with acloud server 21, and thecloud server 21 is used to analyze the key data to obtain corresponding decision information and output it to the edge control layer 1, and to determine whether the operation result exists. When there is an abnormality in the operation result, the operation result is analyzed to obtain the corresponding decision information and output to the edge control layer 1.

具体地，本实施例中，云端服务器21不仅具备分析关键数据得到决策信息的功能，还具备分析运算结果是否异常的功能，当云端服务器21判断运算结果存在异常时会对运算结果进行二次分析得到对应的决策信息并输出至边缘控制层1，以控制边缘计算模块12根据决策信息对异常的运算结果进行修正并根据决策信息控制管理对应的工业设备。Specifically, in this embodiment, thecloud server 21 not only has the function of analyzing key data to obtain decision information, but also has the function of analyzing whether the operation result is abnormal. When thecloud server 21 determines that the operation result is abnormal, it will perform a secondary analysis on the operation result. Corresponding decision information is obtained and output to the edge control layer 1 to control theedge computing module 12 to revise the abnormal operation result according to the decision information and to control and manage the corresponding industrial equipment according to the decision information.

具体地，本实施例中，云端服务器21还可以部署各类工业应用服务系统，依托云计算、人工智能、物联网和大数据移动互联网等先进的信息技术，发展现代工业综合管理新生态体系，将工业调度、设备管控、地理信息(GIS)和营业收费等工业数据统一整合起来，打破传统工业的“信息孤岛”，实现数据+服务一体化治理，形成完整的工业大数据平台，并利用云端大数据处理的优势实现数据一体化管理，充分挖掘数据价值，提高工作效率，为智慧工业管理决策提供参考，提高管理和服务水平。Specifically, in this embodiment, thecloud server 21 can also deploy various industrial application service systems, relying on advanced information technologies such as cloud computing, artificial intelligence, the Internet of Things, and big data mobile Internet to develop a new ecological system for modern industrial integrated management, Integrate industrial data such as industrial scheduling, equipment management and control, geographic information (GIS), and operating charges in a unified manner, break the "information island" of traditional industries, realize integrated management of data + services, form a complete industrial big data platform, and use the cloud The advantages of big data processing realize the integrated management of data, fully exploit the value of data, improve work efficiency, provide reference for smart industrial management decision-making, and improve management and service levels.

本发明的较佳的实施例中，各设备数据分别包括对应的工业设备的权限级别，则边缘计算模块12如图4所示，包括一数据处理单元121，用于针对每个设备数据，判断设备数据对应的权限级别是否处于预先设定的级别范围内并在权限级别处于级别范围内时对设备数据进行边缘运算得到对应的运算结果，输出至云端服务层2；或In a preferred embodiment of the present invention, each device data respectively includes the authority level of the corresponding industrial device, then theedge computing module 12, as shown in FIG. 4, includes adata processing unit 121, which is used to determine the Whether the permission level corresponding to the device data is within the preset level range, and when the permission level is within the level range, perform edge computing on the device data to obtain the corresponding computing result and output it to thecloud service layer 2; or

在权限级别未处于级别范围内时，将设备数据作为关键数据输出至云端服务层2。When the permission level is not within the level range, the device data is output to thecloud service layer 2 as key data.

具体地，本实施例中，边缘计算模块12主要针对工业设备的权限级别甄别出关键数据，由于边缘计算模块12具备一定的数据处理能力，因此将大部分的设备数据由边缘计算模块12直接进行分析处理，只将少量的关键数据上传至云端服务层2进行分析处理。Specifically, in this embodiment, theedge computing module 12 mainly identifies key data according to the authority level of the industrial equipment. Since theedge computing module 12 has a certain data processing capability, most of the equipment data is directly processed by theedge computing module 12. For analysis and processing, only a small amount of key data is uploaded to thecloud service layer 2 for analysis and processing.

优选的，当边缘计算模块12判断设备数据对应的工业设备的权限级别处于自身设定的级别范围内时，根据边缘算法直接对设备数据进行分析得到对应的运算结果，当边缘计算模块12判断设备数据对应的工业设备的权限级别未处于自身设定的级别范围内时，将设备数据作为关键数据上传至云端服务层2。Preferably, when theedge computing module 12 judges that the authority level of the industrial equipment corresponding to the equipment data is within the level range set by itself, it directly analyzes the equipment data according to the edge algorithm to obtain the corresponding operation result. When theedge computing module 12 judges that the equipment When the authority level of the industrial equipment corresponding to the data is not within the level range set by itself, the equipment data is uploaded to thecloud service layer 2 as key data.

本发明的较佳的实施例中，边缘计算模块12包括：In a preferred embodiment of the present invention, theedge computing module 12 includes:

一第一控制单元122，用于根据运算结果生成一即时决策信息并根据即时决策信息对设备数据对应的工业设备进行控制管理；以及afirst control unit 122, configured to generate real-time decision information according to the calculation result and to control and manage the industrial equipment corresponding to the equipment data according to the real-time decision information; and

在接收到云端服务层2反馈的关联运算结果的决策信息时，根据决策信息对设备数据对应的工业设备进行控制管理；When receiving the decision information of the associated operation result fed back by thecloud service layer 2, control and manage the industrial equipment corresponding to the equipment data according to the decision information;

一第二控制单元123，用于根据云端服务层2输出的关联关键数据的决策信息对关键数据对应的工业设备进行控制管理。Asecond control unit 123, configured to control and manage the industrial equipment corresponding to the key data according to the decision information associated with the key data output by thecloud service layer 2.

具体地，本实施例中，云端服务层2会对一段时间内上传的运算结果进行统一的异常分析，因此即使云端服务层2发现运算结果存在异常，云端服务层2根据异常的运算结果下发的决策信息也是具有一定延时的，所以第一控制单元122会先将运算结果作为即时决策信息对设备数据对应的工业设备进行控制管理，当后续接收到云端服务层2反馈的关联运算结果的决策信息时，再将决策信息作为即时决策信息对设备数据对应的工业设备进行控制管理。Specifically, in this embodiment, thecloud service layer 2 will perform a unified abnormal analysis on the calculation results uploaded within a period of time. Therefore, even if thecloud service layer 2 finds that the calculation result is abnormal, thecloud service layer 2 will issue the abnormal calculation result according to the abnormal calculation result. The decision information also has a certain delay, so thefirst control unit 122 will first use the calculation result as the real-time decision information to control and manage the industrial equipment corresponding to the equipment data. When decision-making information, the decision-making information is used as real-time decision-making information to control and manage the industrial equipment corresponding to the equipment data.

优选的，以门禁管理类设备的设备数据为例，边缘计算模块12判断门禁管理类设备的权限级别处于自身设定的权限范围内，直接利用边缘算法对设备数据进行分析得到对应的运算结果，比如运算结果表征开门，则边缘计算模块12直接根据运算结果控制门禁管理类设备进行开门操作，而运算结果会实时上传至云端服务层2，云端服务层2对一段时间内的运算结果进行分析，发现这段时间内表征开门的运算结果过多时，云端服务器2会根据运算结果下发表征限制开门次数的决策信息至边缘计算模块12，则边缘计算模块12会根据决策信息控制门禁管理类设备的开门次数，当门禁管理类设备的开门次数达到限制开门次数时，边缘计算模块12的运算结果则表征不开门。Preferably, taking the device data of the access control management device as an example, theedge computing module 12 determines that the authority level of the access control management device is within the authority set by itself, and directly uses the edge algorithm to analyze the device data to obtain the corresponding operation result. For example, if the operation result represents the door opening, theedge computing module 12 directly controls the access control management device to perform the door opening operation according to the operation result, and the operation result will be uploaded to thecloud service layer 2 in real time, and thecloud service layer 2 will analyze the operation result within a period of time. When it is found that there are too many operation results representing the door opening during this period, thecloud server 2 will send decision information representing the limit of the number of door openings to theedge computing module 12 according to the operation results, and theedge computing module 12 will control the access control management equipment according to the decision information. The number of door openings. When the door opening times of the access control management device reaches the limit opening times, the operation result of theedge computing module 12 indicates that the door is not opened.

本发明的较佳的实施例中，数据处理单元121输出关键数据和运算结果至云端服务层2之前输出一验证信号至云端服务层2，云端服务层2根据验证信号输出对应的凭证，则边缘计算模块12还包括一通信保护单元124，连接数据处理单元121，如图5所示，包括：In a preferred embodiment of the present invention, thedata processing unit 121 outputs a verification signal to thecloud service layer 2 before outputting key data and operation results to thecloud service layer 2, and thecloud service layer 2 outputs the corresponding certificate according to the verification signal, then the edge Thecomputing module 12 also includes acommunication protection unit 124, connected to thedata processing unit 121, as shown in FIG. 5, including:

一第一保护子单元1241，用于将凭证与预先下载的云端服务层2对应的服务器信息进行对比并在凭证与服务器信息相符时控制数据处理单元121与云端服务层2进行数据传输；以及a first protection sub-unit 1241 for comparing the certificate with the server information corresponding to the pre-downloadedcloud service layer 2 and controlling thedata processing unit 121 to perform data transmission with thecloud service layer 2 when the certificate matches the server information; and

在凭证与服务器信息不符时控制数据处理单元121停止与云端服务层2进行数据传输；Control thedata processing unit 121 to stop data transmission with thecloud service layer 2 when the certificate does not match the server information;

一第二保护子单元1242，用于通过国密SM2加密技术对关键数据和运算结果进行加密处理并控制数据处理单元121将加密后的关键数据和运算结果输出至云端服务层2；A second protection subunit 1242, used for encrypting key data and calculation results through the national secret SM2 encryption technology and controlling thedata processing unit 121 to output the encrypted key data and calculation results to thecloud service layer 2;

一第三保护子单元1243，用于配置一防火墙体系架构对数据处理单元121的网络通信行为进行监控并在发现恶意通信行为时将恶意通信行为上报至云端服务层2。A third protection sub-unit 1243 is configured to configure a firewall architecture to monitor the network communication behavior of thedata processing unit 121 and report the malicious communication behavior to thecloud service layer 2 when malicious communication behavior is found.

具体地，本实施例中，通信保护单元124采用“三层安全防护”的网络防护策略对数据处理单元121进行安全防护，通过第一保护子单元1241进行云端服务器21与数据处理单元121之间的凭证验证防护，通过第三保护子单元1243进行关键数据和运算结果的加密防护，通过第三保护子单元1243进行网络通信行为防护，数据处理处理单元121免遭网络攻击，保障关键数据和运算结果在通信传输过程中的安全性、私密性、完整性。Specifically, in this embodiment, thecommunication protection unit 124 adopts the network protection strategy of “three-layer security protection” to perform security protection on thedata processing unit 121, and the first protection sub-unit 1241 performs security protection between thecloud server 21 and thedata processing unit 121. The third protection sub-unit 1243 performs encryption protection of key data and calculation results, and the third protection sub-unit 1243 performs protection of network communication behavior. Thedata processing unit 121 is protected from network attacks, and the key data and calculation The result is security, privacy, and integrity in the communication transmission process.

实施例一：Example 1:

二次供水泵房远程监控管理系统是将传统的工控技术与物联网技术、微服务架构技术结合在一起的智能工业控制系统，通过该系统实现二次供水泵房相关数据的采集分析，实现对二次供水泵房的全面监控，建立二次供水设施运行维护管理档案，实现二次供水的科学调度，降低管理成本，提高供水突发事件的应变能力，更好地实现安全供水，节能增效，提升形象，推动员工个人素质提升，提高企业的供水运营效益。The remote monitoring and management system for the secondary water supply pump room is an intelligent industrial control system that combines traditional industrial control technology with the Internet of Things technology and micro-service architecture technology. Comprehensive monitoring of secondary water supply pump room, establishment of secondary water supply facilities operation and maintenance management files, scientific scheduling of secondary water supply, reduction of management costs, improvement of resilience to water supply emergencies, better realization of safe water supply, energy conservation and efficiency enhancement , enhance the image, promote the improvement of the personal quality of employees, and improve the water supply operation efficiency of the enterprise.

当供水泵房中各类传感设备采集到数据后由各级PLC设备和动环主机进行简单的数据汇集，然后通过边缘网关对数据进行边缘计算，只是将边缘计算的运算结果传送给云端服务层2或者把云端服务层2要求的关键数据传送给云端服务层2进行云计算处理，同时，云端服务层2的服务信息和决策信息可以通过边缘网关下控到工业设备，完成泵房的远程管理，以实现泵房的无人值守、智慧运营等应用场景，提高二次供水泵房的运行效率和供水服务质量。When various sensing devices in the water supply pump room collect data, the PLC devices at all levels and the dynamic ring host perform simple data collection, and then perform edge computing on the data through the edge gateway, and only transmit the computing results of the edge computing to the cloud service.Layer 2 or transmit the key data required bycloud service layer 2 to cloudservice layer 2 for cloud computing processing. At the same time, the service information and decision-making information ofcloud service layer 2 can be controlled to industrial equipment through the edge gateway to complete the remote control of the pump room. Management, in order to realize the application scenarios of unattended and intelligent operation of the pump room, and improve the operation efficiency and water supply service quality of the secondary water supply pump room.

云计算+边缘计算的工业控制系统架构将计算、存储、通讯等前移至基础设施架构的边缘，可以在一定程度上缓解云计算架构在成本、时延、数据分析方面压力，边缘计算技术为边缘网关提供边缘计算能力，实现实时性业务的处理，并依据任务的需求或者边缘网关自身的权限根据边缘算法判断决定设备数据的计算处理方式，进而提高数据处理的实时性，通过边缘计算和云计算相互融合协同处理完成智慧水务中IOT应用场景的服务。The industrial control system architecture of cloud computing + edge computing moves computing, storage, communication, etc. to the edge of the infrastructure architecture, which can relieve the pressure of cloud computing architecture in terms of cost, delay, and data analysis to a certain extent. Edge computing technology is The edge gateway provides edge computing capabilities, realizes real-time business processing, and determines the computing and processing method of device data according to the requirements of the task or the authority of the edge gateway itself according to the edge algorithm, thereby improving the real-time performance of data processing. Computational integration and collaborative processing complete the services of IOT application scenarios in smart water affairs.

以上所述仅为本发明较佳的实施例，并非因此限制本发明的实施方式及保护范围，对于本领域技术人员而言，应当能够意识到凡运用本说明书及图示内容所作出的等同替换和显而易见的变化所得到的方案，均应当包含在本发明的保护范围内。The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the embodiments and protection scope of the present invention. Those skilled in the art should be aware of the equivalent replacements made by using the contents of the description and the drawings. The solutions obtained from obvious changes and obvious changes shall all be included in the protection scope of the present invention.

Claims (10)

1. An intelligent industrial control system is characterized by being configured on an industrial site, wherein a plurality of industrial devices are arranged in the industrial site;

the intelligent industrial control system comprises:

an edge control layer comprising:

the data acquisition module is used for respectively acquiring equipment data corresponding to each industrial equipment;

the edge calculation module is connected with the data acquisition module through a data transmission module and is used for receiving the equipment data transmitted by the data transmission module, analyzing each piece of equipment data respectively, extracting key data from the equipment data and outputting the key data, and performing edge operation on other equipment data except the key data to obtain corresponding operation results and outputting the operation results;

the cloud service layer runs above the edge control layer and is used for receiving the key data and the operation result output by the edge calculation module, respectively processing the key data and the operation result to obtain corresponding decision information and outputting the decision information to the edge control layer;

and the edge calculation module is also used for controlling and managing the corresponding industrial equipment according to the decision information or the operation result.

2. The intelligent industrial control system of claim 1, wherein each industrial device is a production device, an environmental sensing device, a video monitoring device, and an access control management device, and the data acquisition module comprises:

the production data acquisition unit is used for acquiring the equipment data corresponding to the production equipment;

the environment data acquisition unit is used for acquiring the equipment data corresponding to the environment sensing equipment;

the video data acquisition unit is used for acquiring the equipment data corresponding to the video monitoring equipment;

and the access control data acquisition unit is used for acquiring the equipment data corresponding to the access control management equipment.

3. The intelligent industrial control system of claim 2, wherein the data transmission module comprises:

the first transmission unit is used for transmitting the equipment data output by the production data acquisition unit;

and the second transmission unit is used for respectively transmitting the environmental data acquisition unit, the video data acquisition unit and the equipment data output by the access control data acquisition unit.

4. The intelligent industrial control system of claim 3, wherein the first transmission unit is a PLC device.

5. The intelligent industrial control system of claim 3, wherein the second transmission unit is a rotating ring master.

6. The intelligent industrial control system according to claim 1, wherein the edge computing module is an edge gateway, and the edge gateway receives the device data transmitted by the data transmission module by using a multi-core configuration data acquisition method.

7. The intelligent industrial control system according to claim 1, wherein a cloud server is disposed in the cloud service layer, and the cloud server is configured to analyze the key data to obtain the corresponding decision information and output the decision information to the edge control layer, and determine whether the operation result is abnormal, and analyze the operation result when the operation result is abnormal to obtain the corresponding decision information and output the decision information to the edge control layer.

8. The intelligent industrial control system according to claim 1, wherein each piece of device data includes an authority level of the corresponding industrial device, and the edge calculation module includes a data processing unit configured to determine, for each piece of device data, whether the authority level corresponding to the piece of device data is within a preset level range, perform edge calculation on the piece of device data when the authority level is within the level range to obtain a corresponding calculation result, and output the calculation result to the cloud service layer; or

And when the authority level is not in the level range, outputting the device data serving as the key data to the cloud service layer.

9. The intelligent industrial control system of claim 7, wherein the edge calculation module comprises:

the first control unit is used for generating instant decision information according to the operation result and controlling and managing the industrial equipment corresponding to the equipment data according to the instant decision information; and

when the decision information which is related to the operation result and fed back by the cloud service layer is received, the industrial equipment corresponding to the equipment data is controlled and managed according to the decision information;

and the second control unit is used for controlling and managing the industrial equipment corresponding to the key data according to the decision information which is output by the cloud service layer and is related to the key data.

10. The intelligent industrial control system according to claim 8, wherein the data processing unit outputs a verification signal to the cloud service layer before outputting the key data and the operation result to the cloud service layer, and the cloud service layer outputs a corresponding certificate according to the verification signal, and the edge computing module further includes a communication protection unit connected to the data processing unit, including:

the first protection subunit is used for comparing the certificate with server information corresponding to the cloud service layer downloaded in advance and controlling the data processing unit to perform data transmission with the cloud service layer when the certificate is consistent with the server information; and

when the certificate is inconsistent with the server information, controlling the data processing unit to stop data transmission with the cloud service layer;

the second protection subunit is used for encrypting the key data and the operation result by using a secret SM2 encryption technology and controlling the data processing unit to output the encrypted key data and the encrypted operation result to the cloud service layer;

and the third protection subunit is used for configuring a firewall architecture to monitor the network communication behavior of the data processing unit and report the malicious communication behavior to the cloud service layer when the malicious communication behavior is found.

Images