A method for safely accessing the platform of the collection terminal of the power generation unit of a new energy plant

Abstract

The invention discloses a method for safely accessing a platform of a power generation unit acquisition terminal of a new energy plant, comprising the following steps: 1) the acquisition terminal of the power generation unit requests to access the internal network of the station control system; 2) the connection between the acquisition terminal and the safe access platform The secure access gateway conducts two-way identity authentication; 3) The identity authentication system of the secure access gateway performs security assessment and identification on both communication parties, and performs access or rejection control according to the evaluation and identification results; 4) After the identity authentication is successful, the acquisition terminal passes Establish a communication channel with the secure access platform for secure data interaction. The invention realizes the integrity and confidentiality of data transmission, and ensures the channel protection safety when various power generation unit collection terminals of new energy plants and stations are connected.

Description

technical field [0001] The invention relates to a method for safely connecting a collection terminal of a power generation unit of a new energy plant to a platform, and belongs to the field of power distribution automation. Background technique [0002] A virtual private network (Virtual Private Network, referred to as VPN) refers to the technology of establishing a private network on a public network. The reason why it is called a virtual network is mainly because the connection between any two nodes of the entire VPN network does not have the end-to-end physical link required by the traditional private network, but is structured on the network provided by the public network service provider. Platforms, such as logical networks on the Internet (Internet), ATM (Asynchronous Transfer Mode), Frame Relay (Frame Relay), etc., user data is transmitted in logical links. It covers the extension of private networks across shared or public networks with encapsulated, encrypted, and ...

AI Technical Summary

Problems solved by technology

[0005] 1) The enterprise cannot directly control the reliability and performance of the Internet-based VPN, and must rely on the Internet service provider that provides the VPN to ensure the operation of the service;

[0006] 2) It is not easy for enterprises to create and deploy VPN lines. This technology requires a high-level understanding of network and security issues, and requires careful planning and configuration;

[0007] 3) VPN products and solutions from different vendors are always incompatible, because many vendors are unwilling or unable to comply with VPN technical standards;

[0008] 4) When using wireless devices, VPN is a security risk. Roaming between access points is particularly prone to problems. When users roam between access points, any solution that uses advanced encryption technology may be broken.

[0041] In the above algorithm, user A and user B can exchange a shared secret key through ECDH (Key Agreement Algorithm) on an insecure communication channel. There is no need to transfer all the information to each other, and the security is poor. Therefore, on this basis, the present invention proposes an efficient key exchange protocol that meets the protection requirements of the collection business

Images