A data isolation exchange and security filtering method for electric power Internet of things

Abstract

The invention provides a data isolation exchange and security filtering method orienting electric power internet of things. The method comprises: (1) constructing an isolation framework based on a preposition agent and a special protocol; (2), carrying out feature vector extraction at the preposition agent part; (3), carrying out label package at the preposition agent part, carrying out label analysis at an isolation service side; (4), carrying out label filter at the isolation service side; (5), carrying content filter at the isolation service side combining the feature vector and the label filter. According to the invention, complete protocol isolation is realized through introducing the preposition agent and private application layer protocol, and the isolation intensity is greatly improved.

Description

technical field [0001] The invention relates to a method for secure isolation exchange, in particular to a data isolation exchange and security filtering method for the electric power Internet of Things. Background technique [0002] The basic principle of security isolation and information exchange technology is to enable two or more networks to carry out secure data transmission and resource sharing between networks through a special hardware-isolation device. The specific method is generally that the isolation device cuts off the TCP / IP connection between the networks, decomposes or reassembles the TCP / IP data packet, conducts a security review, and then establishes an effective connection with the host on the other side and sends the data out. [0003] In the context of the development of smart grids, there are a large number of smart terminals, smart knife switches, operating terminals, and various power business systems in the power Internet of Things environment. Thes...

AI Technical Summary

Problems solved by technology

The defense measure of traditional security isolation and information exchange technology to this kind of attack is to enhance the filtering ability of application layer as much as possible, but this has obviously degenerated to the level of application layer firewall

[0006] 2. There is a contradiction between filtration depth and efficiency

For example, hundreds of millions of terminals are involved in the power Internet of Things environment, the data exchange traffic is huge, and there are strict requirements on data exchange delay. The traditional security isolation and information exchange technology system can only deal with it by turning off the filtering function or reducing the filtering depth. There are obvious deficiencies in solving the contradiction between filtration depth and efficiency

Images