A Detection Method for the Asset Information of Distribution Automation Terminals

Abstract

The present invention discloses a detection method for the asset information of a distribution automation terminal, which relates to the field of distribution automation. The steps sequentially include: initializing the database of the distribution automation system; performing fingerprint scanning on the terminal system and obtaining the target system fingerprint F; performing port scanning on the target distribution automation terminal and obtaining the target open port set P; extracting the characteristics of the terminal brand and model information from the database; determining whether there is a system service port that can be logged in on the target distribution automation terminal; determining whether the login is successful. If the login is successful, the next step is performed; if not, the operation is ended; obtaining the software version information and hardware information of the distribution automation terminal; ending the operation. After the automatic login is successful in the present invention, the software information and hardware information of the terminal can be obtained by automatically reading specific files in the terminal, thereby improving work efficiency.

Description

Technical Field

[0001] The present invention relates to the technical field of distribution automation, and in particular, to a method for detecting the asset information of a distribution automation terminal. Background Art

[0002] Distribution automation technology is an important technology serving the transformation and construction of urban and rural distribution networks. It is the last link in the power generation, transmission, transformation, and distribution of electric energy and plays a very important role in power production. A distribution automation system (DAS) is an automation system that enables distribution enterprises to monitor, coordinate, and operate distribution equipment in real time from a distance. The distribution automation system consists of devices such as a SCADA server, a database server, a front-end server, a layer-2 switch, a longitudinal encryption authentication gateway, an OLT, an ONU, and a distribution automation terminal. The distribution automation system is organized by county or city. In a set of distribution automation systems, there are usually hundreds to thousands of distribution automation terminals. Currently, there are dozens of domestic manufacturers of distribution automation terminals, and hundreds of different models of distribution automation terminals are produced. In a set of distribution automation systems, multiple brands and models of distribution automation terminals usually coexist and work simultaneously. At present, the management of these distribution automation terminals mainly relies on manual methods, manually recording in a database or an EXCEL spreadsheet. When a new distribution automation terminal is connected to the distribution automation system or an old one is removed, it is necessary to manually identify the manufacturer information, model information, software version information, hardware version information, etc. of the distribution automation terminal on-site. After manually verifying the information of the distribution automation terminal, the information in the database or EXCEL for recording the terminal information is manually changed.

[0003] In this field, distribution automation systems, distribution automation terminals, and assets are all very important technologies. Among them, the distribution automation system (DAS) is an automation system that enables distribution enterprises to monitor, coordinate, and operate distribution equipment in real time from a distance. Its content includes several parts such as distribution network data acquisition and monitoring (SCADA system), distribution geographic information system (GIS), and demand side management (DSM). Distribution automation technology is an important technology serving the transformation and construction of urban and rural distribution networks. Distribution automation includes feeder automation and distribution management systems, and communication technology is the key to distribution automation. At present, many pilot projects have been carried out for distribution automation in China, and the three-layer structure composed of a distribution master station, sub-stations, and feeder terminals has been widely recognized. Fiber optic communication as the communication method for the backbone network has also reached a consensus. The realization of feeder automation can also be fully based on fiber optic communication, which enables feeder terminals to communicate with each other quickly and jointly achieve higher-performance feeder automation functions. The distribution automation terminal (abbreviated as DTU) is an intelligent terminal device installed in the distribution room. It can communicate with the remote distribution master station, send the operation data of distribution equipment to the distribution master station, and can also receive the control commands of the distribution master station to control and adjust the distribution equipment. It has functions such as remote control, remote measurement, remote signaling, and fault detection, communicates with the distribution automation master station, provides the operation status of the distribution system and various parameters and the information required for monitoring and control, including switch status, power parameters, phase-to-phase faults, ground faults, and parameters during faults, and executes the commands issued by the distribution master station to adjust and control the distribution equipment to achieve functions such as fault location, fault isolation, and rapid restoration of power supply in non-fault areas. Assets are information or resources valuable to an organization and are the objects protected by security policies. In the risk assessment work, the important factors of risks are centered around assets, and threats, vulnerabilities, and risks all objectively exist with respect to assets. Threats utilize the vulnerabilities of assets themselves, making the occurrence of security incidents possible, thus forming security risks. Once these security incidents occur, they will have a certain impact on specific assets or even the entire information system, thus affecting the interests of the organization. Therefore, assets are important objects of risk assessment.

[0004] However, currently, there are mainly two main methods for identifying the asset information of distribution automation terminals: automated identification of information assets and manual identification. Among them, the main disadvantage of automated identification of information assets is that: the currently known automated identification methods for information assets mainly target information system assets and devices such as computers, servers, switches, and application systems. The IP addresses, open ports, and open services of such facilities can be automatically identified through network scanning. However, the support for intelligent electronic products in specific industries such as distribution automation terminals is insufficient, and information such as the brand, model, software version, and hardware version of distribution automation terminals cannot be effectively identified, lacking pertinence and sufficient support. The main disadvantage of manual identification is that: through manual means, the brand, model, software version, hardware version, and other information of distribution automation terminals can be completely and effectively identified and fully supported. However, through manual means, it is necessary to manually go to the relevant distribution room on-site and operate the distribution automation terminal for identification. Since the distribution rooms are distributed in various regions of the city, the manual identification workload is large and the complexity is high.

[0005] Chinese Patent CN106101098B discloses an information asset identification method and device. The method includes the following steps: identifying the type and format of data; establishing combinations of data types and data formats; hierarchically identifying each combination; traversing all combinations formed by data types and data formats for asset identification; reconstructing the asset list, summarizing the asset lists of each asset layer, merging the same assets, rating the security levels of the data involved in the assets, and adding the security attributes of the data to the asset list. Based on data, this invention strengthens the relevance of information assets through bottom-up hierarchical identification. However, this invention cannot effectively identify and obtain asset-related information such as the manufacturer information, model information, software version information, and hardware version information of various types of distribution automation terminals.

[0006] Chinese Patent CN112039853A discloses a method for identifying assets in a local area network. The method for identifying assets in the local area network includes the following steps: obtaining traffic data in the local area network; identifying the host IP in the local area network based on the IP address audited from the traffic data; extracting different features from the traffic data according to the preset feature identifiers corresponding to different host attributes, and identifying the host attributes corresponding to the host IP based on the features to determine the asset information of the host corresponding to the host IP. This invention also discloses a device, equipment, and readable storage medium for identifying assets in a local area network. This invention identifies the asset information of the host through the traffic data in the local area network, and the asset information can be determined without actively scanning the host. However, this invention cannot effectively identify and obtain asset-related information such as the manufacturer information, model information, software version information, and hardware version information of various types of distribution automation terminals, lacking pertinence and sufficient support.

[0007] Chinese Patent CN110991584A relates to a distribution substation asset inventory system, method, device, computer equipment and storage medium. The system includes: active radio frequency identification tags, card readers, wireless gateways, data servers and terminal displays; the active radio frequency identification tags are used to store the asset codes of assets; the card readers are used to periodically read the active radio frequency identification tags to obtain the asset codes, and send the asset codes to the data server through the wireless gateway; the wireless gateway is used to transmit the asset codes to the data server; the data server is used to receive the asset codes, and obtain the inventory information of the assets according to the asset codes; compare the inventory information with the pre-stored ledger information, and when the inventory information does not match the ledger information, determine that an abnormal situation has occurred and obtain the inventory abnormal information; the terminal display is used to display the inventory abnormal information. However, the present invention cannot effectively identify and obtain asset-related information such as the manufacturer information, model information, software version information, and hardware version information of various types of distribution automation terminals. Summary of the Invention

[0008] In order to solve the technical problems such as the inability to effectively identify the software and hardware version information of distribution automation terminals and the large human input cost in the prior art, the present invention provides a method for detecting asset information of distribution automation terminals.

[0009] In order to achieve the object of the present invention, the technical solution adopted by the present invention is as follows:

[0010] A method for detecting asset information of distribution automation terminals, the steps include:

[0011] Step S1: Establish a many-to-one mapping relationship set M for known distribution automation terminals and enter it into the database, and enter all the login accounts and passwords of the distribution automation terminals in the user distribution automation system into the database;

[0012] Further, in the laboratory, the existing distribution automation terminals {{system fingerprint, open port}: {terminal brand, terminal model}} are entered into the database manually, and the system fingerprint and open port are obtained through an automated scanning software, and the terminal brand and terminal model are obtained by manually checking the equipment.

[0013] Further, the system fingerprint and open port are obtained through an automated scanning software, and the terminal brand and terminal model are obtained by manually checking the equipment.

[0014] Further, obtain the brand and model information of the terminal according to the system fingerprint and open port information of the target terminal;

[0015] Further, the many-to-one relationship set M in step S1 includes system fingerprint, open port, terminal brand and terminal model.

[0016] Step S2: Use the detection method in the detection device to perform detection, perform fingerprint scanning on the distribution automation terminal system that needs to obtain target information, and obtain the target system fingerprint F;

[0017] Further, retrieve {terminal brand, terminal model} through {system fingerprint, open port};

[0018] Further, the detection method in step S2 includes IP address, open port, open service, and operating system fingerprint.

[0019] Step S3: Use the detection method in the detection device to perform port scanning on the target distribution automation terminal, and obtain the target open port set P;

[0020] Step S4: According to the information {F, P} of the obtained system fingerprint F and the terminal open port set P, retrieve the corresponding terminal brand and model information from the database obtained in step S1, and perform feature extraction on the terminal brand and model information;

[0021] Step S5: Determine whether there is a system service port that can be logged in on the target distribution automation terminal. If so, use the available login port to log in to the internal of the distribution automation terminal system and perform the operation in step S6; if there is no system service port that can be logged in, stop the detection and end the operation;

[0022] Step S6: Extract all the account names and passwords entered by the user from the database obtained in step S1, and perform logins in sequence. If there is an account name and password combination that can be successfully logged in, perform the operation in S7. If all the user name and password combinations entered by the user cannot be logged in, stop the detection and end the operation;

[0023] Step S7: After successfully automatically logging in to the internal of the distribution automation terminal system, the system reads the file A storing the software version information of the distribution automation terminal system through the detection method to obtain the software version information of the distribution automation terminal; and reads the file set B storing the hardware version information in the distribution automation terminal system, and obtains the hardware information of the distribution automation terminal;

[0024] Further, step S7 automatically logs in to the internal of the terminal system according to the user name and password extracted from the database, uses the file reading command in the detected terminal system to automatically read the files containing the terminal software information and hardware information, and transmits and saves the read information to the detection device;

[0025] Further, in step S7, the obtained information is transmitted and saved to the inside of the detection device itself;

[0026] Further, the software version information in step S7 includes software version number, compilation version number, developer, dependent environment, and system status.

[0027] Further, in step S7, the hardware version information includes the CPU model, motherboard model, and network card model.

[0028] Step S8: End the operation.

[0029] Compared with the prior art, the beneficial effects of the present invention are specifically reflected in:

[0030] (1) The present invention can automatically identify and obtain asset-related information such as the manufacturer information, model information, software version information, and hardware version information of various types of distribution automation terminals in the distribution automation system, and can perform automated query and update maintenance on the automatically obtained information, greatly reducing the complexity of manual work and reducing the manual workload;

[0031] (2) The present invention realizes automated information acquisition of the brand information, model information, software version information, and hardware version information of the distribution automation terminal;

[0032] (3) The present invention establishes a mapping relationship set database of {{system fingerprint, open port}: {terminal brand, terminal model}}, and can automatically obtain the brand and model information of the terminal according to the terminal fingerprint and open port information;

[0033] (4) The present invention can automatically log in to the internal of the distribution automation terminal system by using the obtained open port information of the distribution automation terminal and the account name and password entered by the user;

[0034] (5) After the present invention successfully logs in automatically, it can obtain the software version information and hardware information of the terminal by automatically reading specific files in the terminal, improving work efficiency;

[0035] (6) The first step of the present invention is to obtain the brand model information of the target through {{system fingerprint, open port}: {terminal brand, terminal model}}, and determine whether the target supports the second operation according to the brand model of the target. If the second operation is supported for the target system, it will read the internal configuration file of the target system by automatically logging in to the target system, and obtain the software and hardware information of the target system, reducing the complexity of manual work. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is a flow diagram of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0037] To make the objectives and technical solutions of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below in conjunction with the embodiments.

[0038] Embodiment 1

[0039] As Figure 1 shown in the flowchart of a detection method for the asset information of a distribution automation terminal, the steps include:

[0040] Step S1: Establish a one-to-many mapping relationship set M for known distribution automation terminals and enter it into the database, and enter all the login accounts and passwords of the distribution automation terminals in the user's distribution automation system into the database;

[0041] Specifically, in the laboratory, the existing distribution automation terminals {{system fingerprint, open port}: {terminal brand, terminal model}} are entered into the database manually. The system fingerprint and open port are obtained through an automated scanning software, and the terminal brand and terminal model are obtained by manually checking the device. The establishment process of this mapping relationship is a semi-automatic method, that is, the system fingerprint and open port are obtained automatically, and the terminal brand and terminal model are obtained manually, and the entry is manual entry; specifically, {{system fingerprint, open port}: {terminal brand, terminal model}} is an explanation. The system fingerprint and open port are information that can be automatically obtained without entering the internal part of the distribution automation terminal to be tested. Establishing this mapping set enables the detection method in the detection device to, without logging into the internal part of the target to be tested, automatically obtain the system fingerprint and open port of the target terminal to be tested through automation, identify the brand and model of the target, and the detection device selects whether to enter the internal part of the target system to obtain more detailed software and hardware information according to the brand and model of the target;

[0042] Specifically, the one-to-many mapping relationship set M in step S1 includes system fingerprint, open port, terminal brand, and terminal model. Among them, the "many" in "one-to-many" refers to the set {system fingerprint, open port}, and the "one" refers to the set {terminal brand, terminal model};

[0043] Step S2: Use the detection method in the detection device to perform detection, perform a fingerprint scan on the distribution automation terminal system that needs to obtain target information, and obtain the target system fingerprint F; among them, the detection device is a general computing device carried by a computer program that implements the detection method;

[0044] Specifically, the detection method in step S2 includes IP address, open port, open service, and operating system fingerprint. This detection method is a technical method that has been publicly disclosed in the prior art.

[0045] Step S3: Use the detection method in the detection device to perform a port scan on the target distribution automation terminal, and obtain the target open port set P; among them, the detection device is a general computing device carried by a computer program that implements the detection method;

[0046] Step S4: According to the information of the obtained system fingerprint F and the set P of terminal open ports, retrieve the corresponding terminal brand and model information from the database obtained in Step S1, and extract the features of the terminal brand and model information;

[0047] Step S5: Determine whether there is a system service port that can be logged in on the target distribution automation terminal. If so, use the available port to log in to the internal of the distribution automation terminal system and perform the operation in Step S6; if there is no system service port that can be logged in, stop the detection and end the operation;

[0048] Step S6: Extract all the account names and passwords entered by the user from the database obtained in Step S1 and perform logins in sequence. If there is an account name and password combination that can be successfully logged in, perform the operation in S7. If all the user name and password combinations entered by the user cannot be logged in, stop the detection and end the operation;

[0049] Step S7: After successfully logging in to the internal of the distribution automation terminal system automatically, the system reads File A storing the software version information of the distribution automation terminal system through the detection method to obtain the software version information of the distribution automation terminal; and reads the set B of files storing the hardware version information in the memory of the distribution automation terminal system, and obtains the hardware information of the distribution automation terminal;

[0050] Specifically, in Step S7, according to the user name and password extracted from the database, it automatically logs in to the internal of the terminal system, uses the file reading command in the detected terminal system to automatically read the files containing the terminal software information and hardware information, and transmits and saves the read information to the detection device;

[0051] Specifically, in Step S7, the obtained information is transmitted and saved to the inside of the detection device itself;

[0052] Specifically, the software information and hardware information in Step S7 are major categories, and several sub-categories can be further divided below. The software information includes, but is not limited to, several pieces of information such as software version number, compilation version number, developer, dependent environment, system status, etc. The hardware information includes, but is not limited to, cpu model, motherboard model, network card model, memory size, disk size, etc.

[0053] Step S8: End the operation.

[0054] Among them, Steps S1 to S6 implement the query function, and Step S7 implements the update function.

[0055] The above are only the embodiments of the present invention, and the description thereof is relatively specific and detailed, but it should not be construed as a limitation to the scope of the patent of the present invention. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present invention, several modifications and improvements can still be made, and these all belong to the protection scope of the present invention.

Claims

1. A method for detecting the asset information of a distribution automation terminal, characterized in that the steps include: Step S1: Establish a one-to-many mapping relationship set M for the information of known distribution automation terminals and enter it into the database, and set and enter the login accounts and passwords of all distribution automation terminals in the user's distribution automation system into the database; Among them, establishing the one-to-many mapping relationship set M includes establishing the relationship between system fingerprints, open ports, terminal brands, and terminal models; The system fingerprints and open ports are obtained through an automated scanning software, and the terminal brands and models are obtained by manually checking the devices; Obtain the brand and model information of the terminal according to the system fingerprint and open port information of the target terminal; Step S2: Use the detection method in the detection device to perform a fingerprint scan on the distribution automation terminal system that needs to obtain the target information, and obtain the target system fingerprint F; Step S3: Use the detection method in the detection device to perform a port scan on the target distribution automation terminal, and obtain the target open port set P; Step S4: According to the information of the obtained system fingerprint F and the terminal open port set P, retrieve the corresponding terminal brand and model information from the database obtained in Step S1, and extract the characteristics of the terminal brand and model information; Step S5: The system automatically determines whether there is a system service login port for the target distribution automation terminal. If so, use the login port to log in to the internal of the distribution automation terminal system and perform the operation in Step S6; if there is no system service login port, stop the detection and end the operation; Step S6: Extract all the account names and passwords entered by the user from the database obtained in Step S1, and perform logins in sequence. If there is an account name and password combination that can be successfully logged in, perform the operation in S7. If all the user-entered user name and password combinations cannot be logged in, stop the detection and end the operation; Step S7: After successfully logging in to the internal of the distribution automation terminal system automatically, the system reads the file A storing the software version information of the distribution automation terminal system to obtain the software version information of the distribution automation terminal; and reads the file set B storing the hardware version information in the memory of the distribution automation terminal system, and obtains the hardware information of the distribution automation terminal; Step S8: End the operation.

2. The method for detecting the asset information of a distribution automation terminal according to claim 1, characterized in that the detection method in Step S2 includes IP address detection, open port detection, open service detection, and operating system fingerprint detection.

3. The method for detecting the asset information of a distribution automation terminal according to claim 1, characterized in that Step S7 is to automatically log in to the internal of the terminal system according to the user names and passwords extracted from the database, use the file reading command in the detected terminal system to automatically read the files containing the terminal software information and hardware information, and transmit and save the read information to the detection device.

4. The method for detecting the asset information of a distribution automation terminal according to claim 1, characterized in that the software version information in Step S7 includes software version number, compilation version number, dependent environment, and system status.

5. The detection method of the asset information of a distribution automation terminal according to claim 1, characterized in that, in step S7, the hardware version information includes the CPU model, the motherboard model, and the network card model.

Images