# US 2025/0097248 A1 · Methods and systems for industrial internet of things (iiot) security management based on management cloud platform > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0097248 A1 - Document ID: US20250097248A1 - Status: Published application - Kind: A1 - Application number: 18/963,738 - Filed: 2024-11-28 - Published: 2025-03-20 - Earliest claimed: 2024-10-28 - Assignees: Chengdu Qinchuan Iot Technology Co., Ltd. - Applicants: Chengdu Qinchuan Iot Technology Co., Ltd. - Inventors: Hanshu SHAO - Web page: https://patentgrep.com/patent/US20250097248A1 ## CPC - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1433: {Vulnerability analysis} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Disclosed is a method and system for industrial Internet of Things (IIoT) security management based on a management cloud platform, and a medium. The method is implemented by the management cloud platform of the system, comprising: obtaining a security control region of at least one of production line; determining a security monitoring parameter of the security control region; generating a security monitoring instruction; obtaining security monitoring information collected by a security monitoring device based on the security monitoring parameter; generating a security management parameter of the security control region; in response to receiving confirmation information sent by an IIoT management platform, generating a security management instruction based on the confirmation information; sending the security management instruction to an IIoT perceptual control platform through the IIoT management platform; and obtaining an execution result of the IIoT perceptual control platform based on the security management instruction, and adjusting the security monitoring parameter based on the execution result. ## Claims ### Claim 1 A method for industrial Internet of Things (IIoT) security management based on a management cloud platform, wherein the method is implemented by a management cloud platform of an IIoT security management system based on a management cloud platform, and the method comprises: obtaining a security control region of at least one production line through an IIoT management platform corresponding to the at least one production line; determining a security monitoring parameter of the security control region; generating a security monitoring instruction based on the security monitoring parameter and sending the security monitoring instruction to a security monitoring device of an IIoT perceptual control platform through the IIoT management platform; obtaining security monitoring information collected by the security monitoring device based on the security monitoring parameter; generating, based on the security monitoring information, a security management parameter of the security control region, the security management parameter including at least one of a security warning parameter and a production scheduling parameter, and sending the security management parameter to the IIoT management platform; in response to determining that confirmation information sent by the IIoT management platform is received, generating a security management instruction based on the confirmation information; sending the security management instruction to the IIoT perceptual control platform through the IIoT management platform, the IIoT perceptual control platform including a warning platform and an operation platform, the warning platform being configured to control a warning device to issue a security warning signal based on the security warning parameter, and/or the operation platform being configured to update an operation parameter of the at least one production line based on the production scheduling parameter; and obtaining an execution result of the warning platform based on the security management instruction, and adjusting the security monitoring parameter based on the execution result. ### Claim 2 (depends on 1) The method of claim 1, wherein the obtaining a security control region of at least one production line through an IIoT management platform corresponding to the at least one production line includes: obtaining production information of the at least one production line and the security control region for a plurality of time periods through the IIoT management platform; the security control region for the plurality of time periods being determined through the IIoT management platform corresponding to the at least one production line; and determining a security control node based on the production information through the IIoT management platform, and determining the security control region for the plurality of time periods based on the security control node. ### Claim 3 (depends on 2) The method of claim 2, wherein the production information includes device operation information, the determining a security control node based on the production information through the IIoT management platform, and determining the security control region for the plurality of time periods based on the security control node includes: determining an interference frequency of an operation device based on the device operation information through the IIoT management platform; and determining the security control node based on the interference frequency through the IIoT management platform. ### Claim 4 (depends on 1) The method of claim 1, wherein the obtaining a security control region of at least one production line through an IIoT management platform corresponding to the at least one production line further includes: obtaining production information of the at least one production line through the IIoT management platform; determining a security control parameter of the at least one production line based on the production information; sending the security control parameter to the IIoT management platform, the IIoT management platform determining the security control region of the at least one production line based on the security control parameter; and obtaining the security control region through the IIoT management platform. ### Claim 5 (depends on 4) The method of claim 4, wherein the determining a security control parameter of the at least one production line based on the production information includes: determining a mapping relationship between an effective control parameter and the production information based on the security monitoring information; and determining the security control parameter based on the mapping relationship and the production information. ### Claim 6 (depends on 5) The method of claim 5, wherein the determining a mapping relationship between an effective control parameter and the production information based on the security monitoring information includes: obtaining management perception information from the IIoT perceptual control platform through the IIoT management platform; and updating the mapping relationship based on the management perception information. ### Claim 7 (depends on 1) The method of claim 1, wherein the generating, based on the security monitoring information, a security management parameter of the security control region, the security management parameter including at least one of a security warning parameter and a production scheduling parameter, and sending the security management parameter to the IIoT management platform includes: determining security risk data of the at least one production line based on the security monitoring information; and determining the security management parameter based on the security risk data. ### Claim 8 (depends on 7) The method of claim 7, wherein the determining security risk data of the at least one production line based on the security monitoring information includes: determining the security risk data through a risk recognition model based on the security monitoring information and a security control parameter, the risk recognition model being a machine learning model; the risk recognition model including a feature layer and a recognition layer; determining, based on the security monitoring information, a monitoring feature through the feature layer; and determining, based on the monitoring feature and the security control parameter, the security risk data through the recognition layer. ### Claim 9 (depends on 8) The method of claim 8, wherein the training of the risk recognition model includes update training, the update training including: in response to an update of the mapping relationship, constructing an updated training set based on the management perception information; and performing the updating training on the risk recognition model based on the updated training set. ### Claim 10 (depends on 7) The method of claim 7, wherein the determining the security management parameter based on the security risk data includes: determining controllable data and uncontrollable data based on the security risk data; determining the security warning parameter based on the controllable data; and determining the production scheduling parameter based on the uncontrollable data and production information. ### Claim 11 A system for industrial Internet of Things (IIoT) security management based on a management cloud platform, wherein the system comprises the management cloud platform and at least one subsystem, the at least one subsystem includes a subsystem corresponding to at least one production line, each of the at least one subsystem includes an IIoT user platform, an IIoT service platform, an IIoT management platform, an IIoT sensor network platform, and an IIoT perceptual control platform, and the management cloud platform is configured to: obtain a security control region of the at least one production line through the IIoT management platform corresponding to the at least one production line; determine a security monitoring parameter of the security control region; generate a security monitoring instruction based on the security monitoring parameter and send the security monitoring instruction to a security monitoring device of the IIoT perceptual control platform through the IIoT management platform; obtain security monitoring information collected by the security monitoring device based on the security monitoring parameter; generate, based on the security monitoring information, a security management parameter of the security control region, the security management parameter including at least one of a security warning parameter and a production scheduling parameter, and send the security management parameter to the IIoT management platform; in response to determining that confirmation information sent by the IIoT management platform is received, generate a security management instruction based on the confirmation information; send the security management instruction to the IIoT perceptual control platform through the IIoT management platform, the IIoT perceptual control platform including a warning platform and an operation platform, the warning platform being configured to control a warning device to issue a security warning signal based on the security warning parameter, and/or the operation platform being configured to update an operation parameter of the at least one production line based on the production scheduling parameter; and obtain an execution result of the warning platform based on the security management instruction, and adjusting the security monitoring parameter based on the execution result. ### Claim 12 (depends on 11) The system of claim 11, wherein the management cloud platform is further configured to: obtain production information of the at least one production line and the security control region for a plurality of time periods through the IIoT management platform; the security control region for the plurality of time periods being determined through the IIoT management platform corresponding to the at least one production line; and determine a security control node based on the production information through the IIoT management platform, and determine the security control region for the plurality of time periods based on the security control node. ### Claim 13 (depends on 12) The system of claim 12, wherein the production information includes device operation information, the management cloud platform is further configured to: determine an interference frequency of an operation device based on the device operation information through the IIoT management platform; and determine the security control node based on the interference frequency through the IIoT management platform. ### Claim 14 (depends on 11) The system of claim 11, wherein the management cloud platform is further configured to: obtain production information of the at least one production line through the IIoT management platform; determine a security control parameter of the at least one production line based on the production information; send the security control parameter to the IIoT management platform, the IIoT management platform determining the security control region of the at least one production line based on the security control parameter; and obtain the security control region through the IIoT management platform. ### Claim 15 (depends on 14) The system of claim 14, wherein the management cloud platform is further configured to: determine a mapping relationship between an effective control parameter and the production information based on the security monitoring information; and determine the security control parameter based on the mapping relationship and the production information. ### Claim 16 (depends on 15) The system of claim 15, wherein the management cloud platform is further configured to: obtain management perception information from the IIoT perceptual control platform through the IIoT management platform; and update the mapping relationship based on the management perception information. ### Claim 17 (depends on 11) The system of claim 11, wherein the management cloud platform is further configured to: determine security risk data of the at least one production line based on the security monitoring information; and determine the security management parameter based on the security risk data. ### Claim 18 (depends on 17) The system of claim 17, wherein the management cloud platform is further configured to: determine the security risk data through a risk recognition model based on the security monitoring information and a security control parameter, the risk recognition model being a machine learning model; the risk recognition model including a feature layer and a recognition layer; determine, based on the security monitoring information, a monitoring feature through the feature layer; and determine, based on the monitoring feature and the security control parameter, the security risk data through the recognition layer. ### Claim 19 (depends on 17) The system of claim 17, wherein the management cloud platform is further configured to: determine controllable data and uncontrollable data based on the security risk data; determine the security warning parameter based on the controllable data; and determine the production scheduling parameter based on the uncontrollable data and production information. ### Claim 20 (depends on 1) A non-transitory computer-readable storage medium storing computer instructions that, when read by a computer, direct the computer to implement the method of claim 1.