Research On Industrial Network Data Monitoring Isolation Device Based On FPGA

The transmission management of real-time data is closely related to the safety and stable operation of industrial network,especially in the network system of power plant.Distributed Control System(DCS)is widely used in power plants production process.Because external Supervisory Information System(SIS)and Management Information System(MIS)are supported by DCS for access,it increases the probability that Internet viruses and malicious programs intrude into the power plant network,which brings hidden dangers to the safe operation of power plant network.Therefore,in order to secure the network data communication of power plant,it is of great practical significance to study the network communication monitoring isolation device between DCS and SIS/MIS.This paper analyzes the threats to network communication in power plant and introduces the development status of network communication isolation technology at home and abroad.Based on this,through demand analysis,a design scheme of Industrial network data monitoring isolation device on FPGA is proposed.Firstly,a one-way transparent transmission communication model is set up.According to the division of model function,the receiving module,the receiving FIFO module and the sending module are designed by using by Verilog language in Quartus II software to realize the reception of the message from the physical layer to the transmission layer,the matching analysis of protocol content,saving of receiving FIFO and sending of sending module and so on,and then a one-way transparent transmission communication model from DCS to SIS is established,which can realize a reliable one-way transparent transmission communication by testing.Secondly,a one-way isolation communication model is constructed.The isolation module is added,and then the sending module is redesigned which includes CRC calibration,data sending,and FIFO sending three sub-module,and then a one-way isolated communication model from SIS to DCS is established.Through testing,it realizes the one-way isolation communication with the function of message judgment which includes the judgment of trust scope of source IP address,the judgment of message category and the judgment of dangerous category of instruction message and so on,and the function of content classification replacement.Finally,between DCS and SIS,the design of two-way isolation communication model between dual network ports based on FPGA is completed.And the test of the transparent transmission communication from DCS to SIS and the test of the isolation communication from SIS to DCS are also carried out.Through the test,it is proved that the industrial network communication monitoring isolation device based on FPGA is of high accuracy,safety and transparency in the case of transparent transmission communication from DCS to SIS and the isolation communication from SIS to DCS,which can provide reliable guarantee for network data communication of power plant.