Relay protection device data collection authority management method based on semantics abstraction expression

Abstract

The invention discloses a relay protection device data collection authority management method based on semantics abstraction expression. Intermediate agent equipment separates a power system station level device and a spacing layer automatic device, after an intermediate agent conducts a safety audit, a corresponding operation request is forwarded to the station level device, the method can be quite easily combined with the safety authority requirement of a power system by citing physical equipment and attribute values according to different occasions, and operation and maintenance personnel can easily control and operate the authority; meanwhile, the mode of adopting message interaction is adopted in a traditional power protocol, text interaction is adopted, the validation and audit are facilitated, and retrieval and inquiry can be conveniently conducted according to semantics.

Description

technical field [0001] The invention relates to a semantic abstract representation-based data collection authority management method for a relay protection device, which belongs to the technical field of electric power communication security. Background technique [0002] The secure communication method between the power system station control layer and the bay layer equipment is currently mainly focused on the power system firewall. The main defense is the common attack behavior of TCP / IP. The semantic analysis of communication is relatively rigid, and the compilation of security rules requires users to Mastering a large number of underlying protocols is difficult to actually promote. [0003] Traditional security audits are mainly focused on preventing network attacks and illegal access to devices, mainly on the MAC addresses of devices at both ends of the network, accessed PORT numbers, packet lengths, and abnormal TCP packets (such as half-connection attacks). It is imp...

AI Technical Summary

Problems solved by technology

However, there are the following disadvantages: 1) In order to ensure the communication efficiency and the wide adaptability of the protocol, the traditional power protocol cannot analyze the traditional power protocol message to finely distinguish the authority of each leopard pattern, such as skipping the bus connection The difference between the command of the switch and the command of tripping the isolation knife in the 103 message is only the point number; 2) Due to the template matching method, it is difficult to learn, and it is difficult for the operation and maintenance personnel of the terminal power system to understand, and it is difficult to participate in the security The formulation of rules, and security rules are easy to change, resulting in only certain types of security rules can be filtered in actual operation

Images