Information security protection method for electric power measurement and control terminal

Abstract

The invention discloses an information security protection method for an electric power measurement and control terminal. The information security protection method specifically comprises the steps of network access control protection, access authorization and authentication protection, audit log recording, data integrity verification, data confidentiality protection, service continuity and network attack defense protection. The network access control protection is protection of access control before connection with the equipment is established; the access authorization and authentication protection comprises the following steps: firstly judging whether a user name exists or not through an equipment end, then judging whether client software passes configuration authentication or not, further judging the correctness of password information input by a user, judging whether communication time is overtime or not, and finally judging whether a request item is authorized or not; the equipment side judges whether log storage is full or not according to the number of the stored audit records, then records the audit information in detail and gives an alarm for reminding, and records the audit logs in detail; verifying data integrity through grammar verification of an input field and verification of a received message through calculation; due to confidentiality of data transmission and storage, a client encrypts plaintext information and transmits the plaintext information in a network channel, after the plaintext information reaches an equipment end, the equipment decrypts the ciphertext, and the equipment judges whether to store and reply the content according to the transmitted content; the service continuity is that the equipment has a self-protection function and can recover the protection of a normal operation state when an exception occurs; the defense protection of the equipment on the network attack is improved by adding the equipment to the data flooding attack, and the method has very high safety protection.

Description

technical field [0001] The invention relates to the field of information security protection of embedded devices, in particular to an information security protection method for power measurement and control terminals. Background technique [0002] Embedded devices are composed of software and hardware, and are devices that can operate independently. They are usually embedded systems for specific applications, and have the characteristics of low power consumption, low performance, and high integration. The power measurement and control terminal is a kind of embedded device, which is used to collect and analyze various information of the electric energy meter and upload it to the main station of the power consumption information collection terminal. At present, the security protection widely used in power measurement and control terminals includes firewalls, network boundary isolation, and virtual professional networks, but some firewalls do not have the functions of detecting...

AI Technical Summary

Problems solved by technology

At present, the security protection widely used in power measurement and control terminals includes firewalls, network boundary isolation, and virtual professional networks, but some firewalls do not have the functions of detecting attacks through application layer protocols, identity authentication, and encrypted communication. The remote communication of the measurement and control terminal plays a protective role

Images