Unidirection insulation network brake with protocol conversion function

Abstract

The invention proposes a novel solution method for network insulation of power generating plant information system. The inventive one-way insulation GAP with protocol conversion function can realize one-way transmission of data between a power generating plant decentralized control system DCS and a superviser information system SIS, and between the superviser information system SIS and information management system MIS. On the basis of guaranteeing one-way transmission of computer network data with different safety grades, the single-phase insulation GAP increases a special protocol converter, supports dual network card binding of the apparatus, and can connect with a redundant kernel switch and a formicating server, thereby realizing the unify of interface function and network insulation function, reinforcing the safety protection capability and having an obvious economic benefit.

Description

A One-way Isolation Gatekeeper with Protocol Conversion Function technical field The invention belongs to the technical field of computer network of power plant information system, in particular to the technical field of network isolation. Background technique The emergence of supervisory information system (Supervisory Information System, SIS for short) in thermal power plants has enabled the production process of electric power enterprises to gradually realize the integration of management and control, and various information islands have been interconnected through the network, which greatly facilitates the control and management of production. However, during the gradual development and improvement of SIS, many areas that need to be improved are found, which are mainly reflected in the following aspects. 1. It is difficult to ensure the dual-network structure for the connection between the lower-level control system and the SIS system In order to ensure the integrit...

AI Technical Summary

Problems solved by technology

At present, such problems in the project can only be solved manually, such as rewiring, etc.

2. The interface device does not completely cut off the possibility of data write-back

The advantages of firewalls are mature technology, strong applicability, high efficiency, good selectivity, and convenient use and maintenance; the disadvantages are that they cannot completely avoid security holes, cannot prevent problems caused by hidden dangers of application programs, and cannot resist viruses and unknown attacks, and cannot fully meet the security and confidentiality requirements of core systems such as power monitoring systems and sensitive information

But its disadvantages are that the price is generally high, the communication rate is limited, and the use and maintenance are more complicated. The communication program must be specially developed and modified for specific equipment.

Some standard interfaces like OPC will not be available

3. The performance and functions of the one-way isolation devices commonly used in the market cannot fully meet the needs

In addition, because the one-way isolation devices currently used in the market generally do not support dual network cards, the SIS internal network to the external network has actually become a single network (that is, the connection labeled 2 in Figure 1 does not exist ), once the connection (single network) fails, the SIS data transmission path will be interrupted, which is also detrimental to the system operation

Moreover, the one-way isolation devices currently on the market have certain limitations, and the support for mirror data transmission of commonly used databases in the SIS system is limited (there is no separate interface, and the interface program must be independently developed by the integrator or user), which affects The rate of system data transmission is also inconvenient for users

Images