Chongqing University of Posts and Telecommunications

Min Wei

Ping Wang

Tao Yang

Jiuchao Mao

Er Xiong Liang

Caiqin Li

Qiaoyue Pang

Yuan Zhuang

XueQin Xiang

Shuang Niu

Qingyun Fu

XianChun Yan

Xiaoyun Li

Xu Yang

Yiming Xing

The present invention relates to a cross-network time synchronization method for industrial wireless network and TSN fusion, which belongs to the field of Industrial Internet, comprising the following steps: S: conducting clock synchronization by a TSN module of a border gateway with a TSN switch of a TSNin a slave clock state; S: inside the border gateway, using the TSN module as a master clock of an industrial wireless module, and conducting clock synchronization by the industrial wireless module with the TSN module through a serial port; S: conducting clock synchronization by a routing device in the industrial wireless network with the industrial wireless module of the border gateway through a beacon frame synchronization mode in the slave clock state, and conducting clock synchronization by the routing device as the master clock of a node device for the node device; S: conducting clock synchronization by a terminal side conversion node in the slave clock state with the node device in the industrial wireless network through a timestamp-free synchronization mode, and finally, synchronizing a TSN switch of a TSNwith the terminal side conversion node in the slave clock state.

Cross-network time synchronization method for industrial wireless network and TSN fusion

The present invention relates to an improved KNN-based 6LoWPAN network intrusion detection method. The present invention selects quantifiable security features which can reflect a self-security state of network elements of a 6LoWPAN network for training, and establishes a 6LoWPAN network feature space. The present invention assigns the weights to the features and transfers zero points, to alleviate the bias caused by large and small impact factors and simplify calculation; realizes construction and update of a state data table of network elements by extracting the feature data of network elements in real time, thus forming a normal contour updated according to the real-time state of the network in the feature space of the 6LoWPAN network based on the clustering effect of a KNN algorithm; and the present invention improves the KNN algorithm and redefines a basis for judging the invasion, to meet the requirements for 6LoWPAN network intrusion detection.

KNN—based 6LoWPAN network intrusion detection method

The present invention relates to a judgment method for edge node computing result trustworthiness based on trust evaluation, and belongs to the technical field of data processing. By means of the present invention, a security mechanism for trustworthiness of a computing result output by an industrial edge node is guaranteed, the industrial edge node is prevented from outputting error data, and attacks of false data of malicious edge nodes are resisted, it is guaranteed that trustworthy computing results not be tampered are input in the industrial cloud, and a site device is made to receive correct computing results rather than malicious or meaningless messages, thereby improving efficiency and security of industrial production.

Judgment method for edge node computing result trustworthiness based on trust evaluation

The present invention provides a factory power management and control method based on edge-cloud coordination, including: 1) forming an industrial field network by a field node, a routing node and a device executing production tasks; 2) parsing production task information data and sending; 3) issuing an STN model in production field to an edge node; 4) sending to the edge node; 5) computing, required to complete the production tasks; 6) computing values of comprehensive ranks; 7) executing, by the edge node, the higher rank, and executing, by the cloud power management center, the lower rank; 8) executing, by the edge node, a demand response algorithm; 9) executing, by the production device, the production tasks based on computing results; and executing, by a power generation station in factory, a power storage station in factory and a power supply station outside factory, corresponding schemes based on the results.

Factory power management and control system and method based on edge-cloud coordination

A scheduling method applied in an industrial heterogeneous network in which a TSN and a non-TSN are interconnected is provided. The TSSDN controller classifies data flows according to the delay requirements, and calculates the scheduling priorities of the data flows in the industrial heterogeneous network. The TSSDN controller adopts an improved CSPF algorithm to determine a shortest path in the heterogeneous network, and marks the scheduling priorities of the data flows which are transmitted from the subnet of the heterogeneous network and arrive at the switch for the first time. Flow table matching is performed at the SDN switch. In a case of performing flow table matching successfully, the counter is updated and the instruction included in the flow table is executed. In a case of performing flow table matching unsuccessfully, a PacketIn message is transmitted to the TSSDN controller, and the TSSDN controller performs analysis and makes a decision.

Scheduling method applied in industrial heterogeneous network in which TSN and non-TSN are interconnected

Provided is a data security sharing method for multiple edge nodes to operate in a collaboration mode under an industrial cloud environment. The method includes: firstly, edge nodes that need collaborative computing separately applying for a shared key to an authority center; secondly, the authority center generating a shared key and issuing the key to each of the edge nodes applying for participation in the collaborative computing; again, the edge nodes combining industrial characteristics to generate an interference factor set, and adding different interference factors for different types of data; then, the data of the edge nodes is implemented with improved homomorphic encryption and is uploaded to an industrial cloud platform; and finally, the industrial cloud platform performing homomorphic analysis and computing on the data uploaded by each of the edge nodes, and issuing the data back to each of the edge nodes.

Data security sharing method in multi-edge node collaboration mode under industrial cloud environment

The present invention relates to a DDoS attack detection and mitigation method for an industrial SDN network, and belongs to the field of network security. According to the method, by means of the cooperation between an east-west interface of an SDN controller in an industrial backhaul network and a system manager of an industrial access network, in conjunction with the features of the industrial backhaul network and an industrial access network data packet, a flow entry matching field of an OpenFlow switch is extended, and a flow table 0 is set to be a 'flow table dedicated to DDoS attack mitigation' for defending against an attacking data flow in a timely manner. By using the SDN controller of an industrial backhaul network and a DDoS attack detection and mitigation system, an attacking data flow is identified and a DDoS attack source is found, and the policy of mitigating a DDoS attack is implemented by means of scheduling a system manager of the industrial access network. According to the present invention, the normal traffic of an industrial backhaul network and an industrial access network is ensured, and a threat posed by a DDoS attack to the security of an industrial network is overcome.

Growing community of inventors

Chongqing, China

Min Wei