Chinese Academy of Sciences

Peng Zeng

Haibin Yu

Jianming Zhao

Dong Li

Tianyu Wang

Zhibo Li

Jindi Liu

Xianda Liu

Bowen Zhang

Xueting Yu

Ming Yang

Wei Liang

Yang Liu

Miao Yang

Xiaoling Zhang

Zhijia Yang

Weijie Xu

Jinchao Xiao

Ming Wan

Wenli Shang

Xing Tong

Zhao Shi

Chunyu Chen

Jun Wang

Zhongwen Li

Chuanzhi Zang

Zhaowei Wang

Jintao Wang

Jie He

Zhijun Shang

Changqing Xia

Xi Jin

Chi Xu

Xiaoyu Liu

An industrial 5G dynamic multi-priority multi-access method based on deep reinforcement learning includes the following steps: establishing an industrial 5G network model; establishing a dynamic multi-priority multi-channel access neural network model based on deep reinforcement learning; collecting state, action and reward information of multiple time slots of all industrial 5G terminals in the industrial 5G network as training data; training the neural network model by using the collected data until the packet loss ratio and end-to-end latency meet industrial communication requirements; collecting the state information of all the industrial 5G terminals in the industrial 5G network at the current time slot as the input of the neural network model; conducting multi-priority channel allocation; and conducting multi-access by the industrial 5G terminals according to a channel allocation result. The method allocates multiple channels to the industrial 5G terminals of different priorities in the industrial 5G network in real time to ensure large-scale concurrent access.

Industrial 5G dynamic multi-priority multi-access method based on deep reinforcement learning

The present invention discloses a data forwarding unit based on a Handle identifier, comprising a dynamic configuration module, a Handle identifier data identification module and a matching-forwarding module. The system of the present invention is applied to network devices such as switches and routers, and supports dynamic configuration of data packet analysis, matching and forwarding rules through data interaction with network systems such as SDN managers, so that the network devices can identify data packets based on the Handle identifier and perform the specified operation on the designated data packets with the Handle identifier according to the rules of dynamic configuration.

Data forwarding unit based on handle identifier

The present invention relates to a network guard unit for an industrial embedded system and a guard method. The specific method is to form the network guard unit (NGU) through security technologies, such as integrated access control, identity authentication and communication data encryption, to provide active guard for a site control device. The NGU comprises an access control module, an identity authentication module, a data encryption module, a key negotiation module and a PCIE communication module, and supports the communication modes of dual network cards and PCIE bus. The present invention builds a secure and trusted operating environment for industrial control systems in combination with an active guard technical means in the field of information security on the basis of ensuring the correctness and the feasibility of security of various terminal devices in the industrial control systems.

Network guard unit for industrial embedded system and guard method

The present invention relates to a security processing unit of PLC and a bus arbitration method thereof, to provide PLC with an active defense means to build a PLC hardware and software security layer. On a hardware security layer, a part of hardware processing mechanism is added to support trusted measurement, encryption algorithms and signature algorithms, and a virtual isolation technology is used; and on a software security layer, transparent encryption and decryption, integrity verification, backup recovery and virtual isolation security mechanism are provided. The security processing aspect is improved to achieve the purpose of security and reliability. The present invention can correctly establish a trusted environment of PLC to ensure that PLC is guided by a strictly verified path. A new star type trusted structure is designed to reduce loss during information transmission and increase information transmission efficiency.

Security processing unit of PLC and bus arbitration method thereof

The present invention relates to a dynamic security method and system based on multi-fusion linkage response. In the method, a site control device conducts active response and passive response through identity authentication and key management to give an alarm for abnormal behaviors. The system comprises an access authentication active response module, an access control active response module, an access control passive response module, an abnormal pretending passive response module, a key vulnerability passive response module and an abnormal state passive response mechanism module. On the basis of ensuring validity and feasibility for the security of a terminal device, the present invention can build a secure and trusted industrial control system operating environment.

Dynamic security method and system based on multi-fusion linkage response

The present invention discloses a method for trusted booting of PLC based on a measurement mechanism, comprising the following steps: a step of initializing self firmware verification; a step of reading and computing firmware information about a PLC; a step of checking and storing one by one; and a step of verifying at the operation start stage. In the method of the present invention, a chip with a trusted function is used as a core of hardware computation. The PLC extends a Flash bus for loading by hardware of the method of the present invention. The hardware of the method of the present invention recognizes necessary boot information, verifies the integrity of the boot loader necessary for the PLC system through the integrity check method and ensures that the booted PLC system is in a trusted state. On the basis of ensuring validity and feasibility for the safety of a terminal device, the present invention can build a safe and trusted industrial control system operating environment.

Method for trusted booting of PLC based on measurement mechanism

The present invention relates to the field of architecture of Internet of Things, specifically to a semantics-based architectural model of Internet of Things. The present invention puts forward the architecture of the Internet of Things based on the study of semantic Web, sensor network, sensor Web, wherein the architecture is divided into 7 layers: physical layer, perception layer, gateway layer, data layer, semantic layer, service layer and application layer. By means of semantic processing of sensor data and building of sensor ontology, the architecture is capable of realizing automatic discovery of heterogeneous resources, enhancing the expression ability of data, achieving effective sharing, reuse, integration, and access to data, improving interoperability of resources and accomplishing intellectualized service.

Semantics-based architectural model of the internet of things

The present invention discloses a method for controlling transmission security of an industrial communication flow based on an SDN architecture. The method comprises: designing a flow security control module in a management controller, performing in-depth parsing on industrial communication flow data, matching the parsing result with each preset industrial rule policy, and executing a control processing operation of the industrial rule policy, to implement transmission control of an industrial communication flow. The management controller comprises an industrial rule policy database used for storing all industrial rule policies set by a user. An SDN switch maintains a structure of a flow table, and an industrial communication flow is forwarded according to the flow table. The flow table comprises a security control identifier used for indicating whether security transmission of this communication flow needs to be controlled. The present invention can detect the legality of an industrial communication data flow, to control access of industrial communication that does not conform to an industrial rule policy, so that the security and reliability of industrial control systems based on an SDN architecture are guaranteed.

Method for controlling transmission security of industrial communications flow based on SDN architecture

Low power consumption networking method for 802.15.4e wireless device 'WD' taking 4-20 mA loop power, including: a 'WD' taking loop power; constructing a WD oriented to ultra-low power consumption; the WD implementing unidirectional time synchronization based on preceding wireless network; on basis of preceding time synchronization, completing neighbor discovery; the WD interacting with the wireless network; and pausing a preceding procedure according to a power monitoring result of an energy storage monitoring module. Messages are detected through continuously switching channels to implement quick and energy-saving unidirectional time synchronization, replaces listening on beacon frames with listening on common messages on a time synchronization basis, improves a listening sequence for neighbor discovery, enables listening only at a time slot where the beacon frames may appear and sleeps at other times, saving channel search time, and also reducing energy consumption generated in neighbor discovery, thus reducing time and energy consumption of entire network establishment.

Low power consumption networking method of 802.15.4e wireless device that takes power based on 4-20mA loop

Proposed is an anomaly detection method for communication behaviors in an industrial control system based on an OCSVM algorithm. According to the present invention, a normal behavior profile model and an abnormal behavior profile model, i.e. a dual-outline model, of communication behaviors in an industrial control system are established, parameter optimization is performed by means of a particle swarm optimization (PSO) algorithm, an optimal intrusion detection model is obtained, and abnormal Modbus TCP communication traffic is identified. According to the present invention, the false alarm rate is reduced by means of cooperative discrimination of the dual-outline detection model, the efficiency and reliability of anomaly detection are improved, and the method is more applicable to practical applications.

Modbus TCP communication behaviour anomaly detection method based on OCSVM dual-outline model

The present invention relates to the technical field of terminal devices of the Internet of Things, more specifically to a semantic method for terminal devices of the Internet of Things capable of analyzing the application characteristics of terminal devices of the Internet of Things, setting down the rules for building ontology base; analyzing and building initial ontology base by using the ontology base building tool; pre-processing information from network and sensors; collecting information uploaded by sensors, updating the initial ontology base, and expanding the ontology base by collecting information searched by network. The method establishes program plan by object-oriented mode, analyzes implementing results by using existing test data or simulated data, and realizes domain updating and expansion of sensor ontology according to specific applications. The whole development and evolution of sensor ontology is increasing gradually in a spiral form.

Semantic method for terminal devices of internet of things

The present invention provides an AP handover method based on double wireless network interface cards. A mobile terminal actively scans the signal strength of an AP, compares the scanned signal strength with the signal strength of a currently accessed AP, and if the signal strength is greater than the signal strength of the current AP, starts handover; otherwise, continuously scans till the handover succeeds. To reduce the handover delay and in accordance with the characteristic that the moving paths are basically fixed in industrial application scenarios, the present invention provides a pre-learning mechanism, that is, before formal application, information such as the location of the AP and the handover sequence in the application scenario is learned and stored in a terminal node, so that specific scanning and handover can be implemented in formal application. The present invention solves the problem of rapid AP handover in the industrial mobile network scenario, the double wireless network interface cards are used to achieve handover without interruption, and the pre-learning mechanism is used in specific industrial application scenarios, so the scanning delay is further reduced.

AP handover method in industrial mobile network based on double wireless network interface cards

The present invention discloses a method and system for realizing Open vSwitch that supports 802.1p. The method comprises: a priority mode configuration stage: the switch receiving a priority configuration statement of a user and parsing the configuration statement; a configuration storage stage: storing the parsed configuration information into a switch database; and a priority-based data forwarding stage: the switch putting a received data packet into a corresponding priority queue according to said configuration information and a flow table so as to forward the data packet. The system comprises a configuration module, a configuration information storage module and a priority-based forwarding module, wherein the data priority-based forwarding module comprises a configuration reading unit, a traffic control setting unit, a flow table storage unit, a data packet parsing unit, a flow table matching unit, a flow table executing unit, a scheduling unit, priority queues, a sending unit, etc.

System and method for open vSwitch virtual switch that supports IEEE 802.1p

The present invention relates to a wireless network communication technology, and in particular to a time synchronization error compensation method for multi-hop wireless backhaul network based on PTP. Based on PTP, the present invention uses an intermediate node to count the timestamps of transceiving the PTP synchronization message Sync and the delay request message Delay_Req, detect and compensate the local forwarding time of synchronization message Sync and the delay request message Delay_Req and the link delay of transmitting the two between nodes based on the linear regression technology, thereby finally implementing asymmetric delay correction of wireless links between the master and slave nodes and completing time synchronization error compensation. The present invention uses the header of the PTP message to transmit the additional time information about the compensation time, the sending time and arrived time of the message and time correction value without modifying the existing PTP, thereby reducing the message overhead, meeting requirements of real-time and high precision of synchronization error compensation, improving the existing time synchronization precision and having strong practicality.

Time synchronization error compensation method for multi-hop wireless backhaul network based on PTP

An RSSI positioning method based on frequency-hopping spread spectrum technology, comprising: calibration stage: measuring the RSSI values of a plurality of channels at fixed points, and recording and calculating the ranging parameters in an RSSI ranging model; system preparation: deploying a positioning anchor node, and realizing synchronization between a target node and the anchor node; conducting communication on the target node by respectively utilizing a plurality of channels to obtain the RSSI values; signal processing stage: processing the RSSI into signal strength amplitude and performing optimization; and positioning stage: calculating a distance and the target node position on a positioning server according to each of the signal strength. The present invention solves the problem that low RSSI positioning precision cannot satisfy the actual requirements because a traditional RSSI positioning method is limited to factors such as multipath signal transmission, co-channel interference, obstacle interference and low coordinate calculation precision of a trilateration method.

Growing community of inventors

Liaoning, China

Peng Zeng