Power distribution terminal security access platform and implementation method thereof

Abstract

The invention provides a power distribution terminal security access platform and an implementation method thereof. A data isolation component and a power distribution interactive gateway, which are connected in sequence, are added between an extranet front-end processor and a power distribution terminal. Compared with the existing security access products, the power distribution terminal security access platform provided by the invention performs theoretical research and technology implementation by dividing information security protection into three main bodies, namely, application server security, transmission channel security and terminal security, therefore the purpose of the platform is clearer. The security network protocol of the power distribution terminal security access platform provided by the invention is provided with a special key agreement mode and a domestic encryption algorithm. According to the characteristics of a power enterprise information network, the current situation of an application system and the requirements of the power information security grade protection, in view of the demands of different service applications in the power enterprise, the power distribution terminal security access platform provided by the invention has a complete technical system and solution for power distribution terminal security access. The power distribution terminal security access platform provided by the invention is implemented without changing the network structure or modifying the firewall configuration or modifying the configuration of a terminal user.

Description

technical field [0001] The invention relates to a network access method, in particular to a realization method for a power distribution terminal access platform. Background technique [0002] IPSec security protocol is a wide-ranging and open virtual private network security protocol. It is an IPSec-based VPN that does not depend on the network access method, can be deployed on any basic network, and can realize end-to-end security protection. But IPSec VPN has some limitations: [0003] 1) Need to install client software, there are a lot of installation, training, upgrade, management and other work, which invisibly increases the user's use cost. [0004] 2) There are few types of access devices supported, mainly Desktop PCs and Notebook PCs, and the support for power distribution devices is limited. [0005] 3) There are some technical problems, such as: NAT penetration, private address conflict, etc. [0006] 4) Since IPSec is a network layer protocol, once a secure tu...

AI Technical Summary

Problems solved by technology

[0003] 1) Need to install client software, there are a lot of installation, training, upgrade, management and other work, which invisibly increases the user's use cost

[0004] 2) There are few types of access devices supported, mainly Desktop PCs and Notebook PCs, and the support for power distribution devices is limited

[0005] 3) There are some technical problems, such as: NAT penetration, private address conflict, etc.

[0006] 4) Since IPSec is a network layer protocol, once a secure tunnel is established, all internal resources can be accessed, which poses certain security risks

However, since SSL VPN is based on a web browser, it can well support B / S applications, but the application support for C / S is not perfect, and it does not support power distribution equipment

Images