Power control instruction execution test method and system

Abstract

The invention discloses a power control instruction execution test method and system, and the method employs a CounTeR encryption mode to carry out the grouping encryption on a power control instruction message, and solves a communication potential safety hazard existing in an ECB grouping encryption mode employed by a control instruction between a master station and a transformer station at present. An IEC-104 protocol is improved, and the defect that an existing IEC104 communication protocol lacks effective security authentication is overcome. A three-stage control instruction execution handshake method based on a zero-trust network between a master station and a transformer substation is constructed, remote control identity authority is continuously confirmed, illegal user access is completely eradicated, and authenticity of identities of two communication parties and traceability of service data are guaranteed. According to the invention, the security defect existing in communication between the master station and the transformer substation at present is overcome, the security risk of executing the master station control instruction by the transformer substation is reduced, and the network attack resistance of a power system is improved.

Description

technical field [0001] The invention relates to power system information physical security technology, in particular to a method and system for checking the execution of power control instructions. Background technique [0002] With the digital transformation of power companies and the large-scale application of 5G, cloud computing and other technologies in the power system, the boundaries between the internal and external networks of power companies are becoming increasingly blurred, and traditional measures based on boundary physical isolation will no longer be an absolute barrier to ensure information security in power companies. Power devices should not automatically trust objects inside or outside, and any object attempting to control power devices should be authenticated before authorization. Therefore, an identity-centric zero-trust network has become an inevitable trend in the development of power system security authentication mechanisms. However, the current power...

AI Technical Summary

Problems solved by technology

However, the current power control command transmission adopts the ECB block encryption method for command encryption. Although it has the advantages of fast and simple, it also has disadvantages such as poor privacy, easy to tamper, error-prone, and inability to resist replay attacks.

At the same time, the communication protocol between the main station and the substation mostly uses IEC104 for message transmission, and the vertical encryption device guarantees the security of the data channel from the main station to the substation for measurement and dispatching to a certain extent. However, the IEC104 protocol does not have identity authentication and security protection mechanisms

Once a malicious attacker tampers with or forges dispatching instructions during the transmission of control instructions and sends them to the substation, the substation executes the tampered or forged control instructions under the condition of absolute trust, and then manipulates primary electrical equipment such as circuit breakers to change the power supply. The actual operating topology of the system is very likely to cause large-scale cascading faults in the power system, seriously affecting the safe and stable operation of the power system

[0003] However, there is currently no effective solution to the communication security problem of power control commands

Images