Method and system for testing edge gateway master and slave station systems

Abstract

The invention discloses an edge gateway master and slave station system test method and system, and relates to the technical field of power system automation, and the method comprises the steps: initiating a tcp connection request to an edge gateway slave station, so as to establish tcp network connection between an edge cluster master station and the edge gateway slave station; acquiring an authentication request message initiated by the edge gateway substation, and verifying the authentication request message; if the verification of the authentication request message is passed, sending an authentication response message to the edge gateway substation, so that the edge gateway substation verifies the authentication response message; after the verification of the authentication response message is passed, acquiring an authentication confirmation message sent by the edge gateway substation; issuing a test command to the edge gateway substation based on the authentication confirmation message; the test command comprises at least one of a remote control command, a container management command and a data subscription command. According to the invention, the technical problem of weak communication security protection of the existing edge gateway master and slave station test system is relieved.

Description

Technical Field

[0001] The present invention relates to the technical field of power system automation, and in particular to a method and system for testing an edge gateway master-substation system. Background Art

[0002] With China's strong support for smart grids, the use of easy-to-use monitoring systems in power systems is becoming increasingly important. In recent years, the testing of edge gateway master and substations within monitoring systems has become increasingly difficult for operators and maintenance personnel. Existing edge gateway master and substation testing systems suffer from weak communication security, allowing unauthorized edge cluster master stations to connect to edge gateway substations and issue illegal commands. Summary of the Invention

[0003] The purpose of the present invention is to provide an edge gateway master-substation system testing method and system in order to solve at least one of the above technical problems.

[0004] In the first aspect, an embodiment of the present invention provides an edge gateway master-substation system testing method, which is applied to an edge cluster master station, and the method includes: initiating a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation; obtaining an authentication request message initiated by the edge gateway substation, and verifying the authentication request message; if the verification of the authentication request message is successful, sending an authentication response message to the edge gateway substation so that the edge gateway substation verifies the authentication response message; after the verification of the authentication response message is successful, obtaining an authentication confirmation message sent by the edge gateway substation; based on the authentication confirmation message, issuing a test command to the edge gateway substation; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

[0005] Furthermore, the method further includes: if the verification of the authentication request message fails, or the verification of the authentication response message fails, disconnecting the TCP network connection.

[0006] Furthermore, when the test command is a remote control command, signature data is added to the end of the message of the remote control command.

[0007] Furthermore, the container management commands include: container installation, container start, container stop, and container uninstall.

[0008] Furthermore, the data subscription command includes: data mutation subscription and data periodic subscription.

[0009] In the second aspect, an embodiment of the present invention also provides an edge gateway master-substation system testing system, which is applied to an edge cluster master station and includes: an initiating module, a verification module, a response module, an acquisition module and a testing module; wherein the initiating module is used to initiate a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation; the verification module is used to obtain the authentication request message initiated by the edge gateway substation and verify the authentication request message; the response module is used to send an authentication response message to the edge gateway substation if the verification of the authentication request message is passed, so that the edge gateway substation verifies the authentication response message; the acquisition module is used to obtain the authentication confirmation message sent by the edge gateway substation after the verification of the authentication response message is passed; the testing module is used to issue a test command to the edge gateway substation based on the authentication confirmation message; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

[0010] Furthermore, the verification module is further configured to disconnect the TCP network connection if the verification of the authentication request message fails or the verification of the authentication response message fails.

[0011] In a third aspect, an embodiment of the present invention further provides an electronic device comprising: a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the method provided in the embodiment of the present invention when executing the computer program.

[0012] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and when the computer instructions are executed by a processor, the method provided in the embodiment of the present invention is implemented.

[0013] The present invention provides an edge gateway master-substation system testing method and system, which adds a certificate verification function to the edge gateway master-substation testing system, ensuring that an illegal edge cluster master station cannot connect to the edge gateway substation. At the same time, when the edge cluster master station sends a remote control command to the edge gateway substation, signature data is added to the end of the remote control command message, ensuring the confidentiality and integrity of the remote control command, improving the security performance of the system, and alleviating the technical problem of weak communication security protection in the existing edge gateway master-substation testing system. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the implementation methods of the present application or the technical solutions in the prior art, the following is a brief introduction to the drawings required for use in the specific implementation methods or the description of the prior art. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0015] Figure 1 A flow chart of a method for testing an edge gateway master-substation system provided by an embodiment of the present invention;

[0016] Figure 2 A flowchart of another edge gateway master-substation system testing method provided by an embodiment of the present invention;

[0017] Figure 3 A schematic diagram of an edge gateway master-substation system testing system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0018] The following will provide a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0019] Example 1

[0020] Figure 1 This is a flow chart of a method for testing an edge gateway master-substation system according to an embodiment of the present invention, which is applied to an edge cluster master station. Figure 1 As shown, the method specifically includes the following steps:

[0021] Step S102: Initiate a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation.

[0022] Step S104: Obtain the authentication request message initiated by the edge gateway substation and verify the authentication request message.

[0023] Specifically, the authentication request message is a certificate authentication request message.

[0024] Step S106: If the authentication request message is verified successfully, an authentication response message is sent to the edge gateway substation, so that the edge gateway substation verifies the authentication response message.

[0025] Step S108: After the authentication response message is verified, the authentication confirmation message sent by the edge gateway substation is obtained.

[0026] Step S110: Based on the authentication confirmation message, a test command is sent to the edge gateway substation; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

[0027] Specifically, the method provided by an embodiment of the present invention further includes disconnecting the TCP network connection if the authentication request message or the authentication response message fails verification. In this embodiment of the present invention, the edge cluster performs verification based on the certificate, and communication is impossible if verification fails, thereby ensuring the security of communication between the edge cluster master station and the edge gateway substation.

[0028] Figure 2 FIG. 1 is a flow chart of another edge gateway master-substation system testing method provided according to an embodiment of the present invention. Figure 2 As shown, the edge cluster master station initiates a TCP network connection to the edge gateway substation device. After the connection is established, the edge gateway substation device will initiate an authentication request to the edge cluster master station. When the edge cluster receives the authentication request message from the edge gateway, it will verify it. If the verification fails, the TCP connection will be disconnected. The TCP connection can be re-established and a new authentication process will begin. If the verification passes, an authentication response message will be sent to the edge gateway. When the edge gateway device receives the authentication response message from the edge cluster, it will verify it. If the verification fails, the current TCP connection will be disconnected. If the verification passes, an authentication confirmation message will be sent to the edge cluster. At this point, the authentication process of the master substation of the edge gateway is completed. The edge cluster master station can send data subscription, data query, container management, remote control and other operation commands to the edge gateway device.

[0029] Since the edge gateway master-substation testing system process of the present invention is highly automated and does not require a large amount of manpower, the computing speed meets the requirements under existing hardware conditions and can adapt to a variety of operating systems, effectively solving the problems of inconvenience in testing edge gateway master-substations in current substation monitoring systems.

[0030] Specifically, when the test command is a remote control command, signature data is added to the end of the message of the remote control command, thereby ensuring the confidentiality and integrity of the remote control command and improving the security performance of the system.

[0031] Optionally, the container management command includes: container installation, container start, container stop, and container uninstall.

[0032] In an embodiment of the present invention, the edge cluster master station provides container management operations such as container installation, container start, container stop, and container uninstallation in an interface-based manner, thereby improving the availability of the edge gateway master-substation test system.

[0033] Optionally, the data subscription command includes: data mutation subscription and data periodic subscription.

[0034] In an embodiment of the present invention, the edge gateway cluster can flexibly subscribe to data to the edge gateway substation based on information such as model, device, measurement point type, etc., including data mutation subscription and periodic subscription, thereby improving the flexibility and availability of the edge gateway master-substation test system.

[0035] From the above description, it can be seen that the present invention provides a method for testing an edge gateway master-substation system, which has the following technical effects compared with the prior art:

[0036] (1) The present invention adds a certificate verification function to the edge gateway master-substation test system to ensure that an illegal edge cluster master station cannot connect to the edge gateway substation, and thus cannot issue commands and other operations to the edge gateway substation, thereby ensuring the safety of the entire power grid operation.

[0037] (2) The present invention effectively ensures that when the master station sends a remote control command to the slave station, signature data is added to the end of the remote control command message, thereby ensuring the confidentiality and integrity of the remote control command and improving the security performance of the system.

[0038] (3) The edge cluster master station of the present invention provides container management operations such as container installation, container startup, container stop, and container uninstallation in an interface-based manner, thereby improving the availability of the edge gateway master-substation test system.

[0039] (4) The edge cluster master station of the present invention can flexibly subscribe to data to the edge gateway substation based on information such as model, equipment, and measurement point type, including data mutation subscription and periodic subscription, thereby improving the flexibility and availability of the edge gateway master-substation test system.

[0040] Example 2

[0041] Figure 3 Schematic diagram of an edge gateway master-substation system test system provided according to an embodiment of the present invention, which is applied to an edge cluster master station. Figure 3 As shown, it includes: an initiating module 10, a verifying module 20, a responding module 30, an acquiring module 40 and a testing module 50.

[0042] Specifically, the initiating module 10 is used to initiate a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation;

[0043] Verification module 20, used to obtain the authentication request message initiated by the edge gateway substation and verify the authentication request message;

[0044] The response module 30 is configured to send an authentication response message to the edge gateway substation if the authentication request message is verified, so that the edge gateway substation verifies the authentication response message;

[0045] The acquisition module 40 is used to obtain the authentication confirmation message sent by the edge gateway substation after the authentication response message is verified;

[0046] The test module 50 is used to send a test command to the edge gateway substation based on the authentication confirmation message; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

[0047] Specifically, the verification module 20 is further configured to disconnect the TCP network connection if the verification of the authentication request message fails or the verification of the authentication response message fails.

[0048] The present invention also provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method provided in the embodiment of the present invention when executing the computer program.

[0049] The present invention also provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed by a processor, the method provided in the embodiment of the present invention is implemented.

[0050] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above and that the invention can be embodied in other specific forms without departing from the spirit or essential characteristics of the invention. Therefore, the embodiments should be considered in all respects as illustrative and non-restrictive, and the scope of the invention is defined by the appended claims, not the foregoing description, and all variations within the meaning and range of equivalents of the claims are intended to be included therein. Any reference sign in a claim should not be construed as limiting the claim to which it relates.

[0051] In addition, it should be understood that although this specification is described in terms of implementation methods, not every implementation method contains only one independent technical solution. This narrative method of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment can also be appropriately combined to form other implementation methods that can be understood by those skilled in the art.

Claims

1. A method for testing an edge gateway master-substation system, characterized in that: Applied to an edge cluster master station, the method includes: Initiate a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation; Obtaining an authentication request message initiated by the edge gateway substation and verifying the authentication request message; If the authentication request message is verified, an authentication response message is sent to the edge gateway substation, so that the edge gateway substation verifies the authentication response message; After the authentication response message is verified, obtaining the authentication confirmation message sent by the edge gateway substation; Based on the authentication confirmation message, a test command is sent to the edge gateway substation; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

2. The method according to claim 1, wherein: The method further includes: if the verification of the authentication request message fails, or the verification of the authentication response message fails, disconnecting the TCP network connection.

3. The method according to claim 1, wherein: When the test command is a remote control command, signature data is added to the end of the message of the remote control command.

4. The method according to claim 1, wherein: The container management commands include: container installation, container start, container stop, and container uninstall.

5. The method according to claim 1, wherein: The data subscription command includes: data mutation subscription and data periodic subscription.

6. An edge gateway master-substation system testing system, characterized in that: Applied to the edge cluster master station, including: initiation module, verification module, response module, acquisition module and test module; among them, The initiating module is used to initiate a TCP connection request to the edge gateway substation to establish a TCP network connection between the edge cluster master station and the edge gateway substation; The verification module is used to obtain the authentication request message initiated by the edge gateway substation and verify the authentication request message; The response module is configured to send an authentication response message to the edge gateway substation if the authentication request message is verified, so that the edge gateway substation verifies the authentication response message; The acquisition module is configured to acquire the authentication confirmation message sent by the edge gateway substation after the authentication response message is verified; The test module is used to send a test command to the edge gateway substation based on the authentication confirmation message; the test command includes at least one of the following: a remote control command, a container management command, and a data subscription command.

7. The edge gateway master-substation system test system according to claim 6, characterized in that: The verification module is further configured to disconnect the TCP network connection if the verification of the authentication request message fails or the verification of the authentication response message fails.

8. An electronic device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method according to any one of claims 1 to 5 when executing the computer program.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and when the computer instructions are executed by a processor, the method according to any one of claims 1 to 5 is implemented.

Images