| With the distributed control system(DCS)has been widely used,data needs to be transferred into the external information management system(SIS)for processing,and SIS is connected with DCS and Internet,which increases the possibility of attack system from the external network malignant procedure and virus,and enhances the risk of unit fault,therefore,the safe and reliable transmission of data is very important,it is essential to design a safe isolation device.This paper firstly introduces the recent development status of domestic and foreign security isolation technology,and analyzes the advantages and disadvantages of isolation technology,such as the original bridge protocol,firewall technology,and one-way physical isolation devices,puts forward the design of security isolation device based on FPGA data communication.Then,design each module from the top,such as sending,receiving,checking module,using Quartus II as the software platform,using Verilog HDL language to program each module,realize the encapsulation process of data transmission from high to low level and the unpacking process of data transmission from the bottom to the top,and make a connection among each module,build the network communication between FPGA and the PC of DCS.Finally,based on the above network communication,establish the communication platform between DCS and SIS in two net exports,then design the replacing module in front of the sending module,achieve safety data releasing through simulating and debugging,replacing the known threat data and extracting large-scale data,data security and reliable transmission of positive penetration transfer and reverse isolation,complete the safety isolating device requirements.The security data and the format of the threat data can be specified by changing the partial statement of the monitoring and replacing module,and the whole design of the system brings great convenience to the system.The safety isolation device based on FPGA realizes the modularization in software design,makes the program clear and complete,so it has very high flexibility,only changing some module statements and connection can realize data communication in design. |
