Global data control method and device for network security of industrial control system of nuclear power plant

Abstract

The application relates to a global data control method and device for network security of an industrial control system of a nuclear power plant, a central control equipment and a storage medium. The method comprises the following steps: obtaining nuclear power management data of a nuclear power management server cluster; the nuclear power management data comprises network security data of an industrial control system of the nuclear power plant; obtaining operation data of at least two nuclear power industrial control system clusters through a system cluster port side isolation device; wherein a cluster space isolation device is arranged between adjacent nuclear power plant system clusters; processing the operation data and the nuclear power management data to obtain global control data of the nuclear power plant; and transmitting the global control data from an internal jurisdiction area of the nuclear power plant to an external jurisdiction area of the nuclear power plant through a control side isolation device. Through the above method, centralized management and regulation and control of the global data of the nuclear power plant can be realized, and the safety of the nuclear power plant is maximally ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computers, in particular to a global data control method and device for network security of an industrial control system of a nuclear power plant. BACKGROUND

[0002] With the progress of science and technology and industry, in order to realize sustainable development, people also pay more and more attention to environmental problems, and the proportion of traditional energy is also less and less, and nuclear energy emerges as the times require as a new energy.

[0003] Nuclear energy is not only more environmentally friendly than traditional energy, but also can provide more energy, so nuclear energy will become the main force of future energy supply, and nuclear power plants, as an important nerve center for converting nuclear energy into electric energy, not only have to bear the function of automatic control of power production, but also have to bear the core function of nuclear safety guarantee. However, with the wide application of informatization, digitization and intelligent technology in the digital instrument control system of the nuclear power plant, network security threats have been brought to the industrial control system of the nuclear power plant, affecting the network security and nuclear safety of the nuclear power plant. Therefore, how to centrally manage and control the network security of all industrial control systems in the nuclear power plant and how to deal with network security threats have become problems to be solved. SUMMARY

[0004] Therefore, it is necessary to provide a global data control method and device for network security of an industrial control system of a nuclear power plant, which can perceive and manipulate the global situation of the nuclear power plant.

[0005] In a first aspect, the present application provides a global data control method for network security of an industrial control system of a nuclear power plant. The method comprises:

[0006] obtaining nuclear power management data of a nuclear power management server cluster; the nuclear power management data comprising network security data of the industrial control system of the nuclear power plant;

[0007] obtaining running data of at least two nuclear industrial control system clusters through a system cluster port side isolation device; wherein a cluster space isolation device is configured between adjacent nuclear power plant system clusters;

[0008] processing the running data and the nuclear power management data to obtain global control data of the nuclear power plant;

[0009] transmitting the global control data from a jurisdictional area inside the nuclear power plant to a jurisdictional area outside the nuclear power plant through a control side isolation device.

[0010] In one embodiment, the system cluster port side isolation device obtains running data of at least two nuclear industrial control system clusters, comprising:

[0011] The operation data of each nuclear power industry control system cluster is obtained through the system cluster port side isolation device corresponding to each nuclear power industry control system cluster.

[0012] The system cluster port side isolation device corresponding to each nuclear power industry control system cluster is determined according to the security level of each nuclear power industry control system cluster, and the security level is directly proportional to the data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0013] In one embodiment, the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters, and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

[0014] In one embodiment, the global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the control side isolation device, including:

[0015] The global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, wherein the first control side isolation device is located between the production area and the office area of the nuclear power plant internal jurisdiction, the second control side isolation device is located between the office area of the nuclear power plant internal jurisdiction and the nuclear power plant external jurisdiction, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0016] In one embodiment, the global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, including:

[0017] The global control data is transmitted from the nuclear power plant internal jurisdiction to the first upper-level nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, so that the first upper-level nuclear power management device transmits the global control data to the second upper-level nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device.

[0018] In one embodiment, each nuclear power industry control system cluster includes at least two nuclear power industry control systems and a data aggregation device, and each nuclear power industry control system transmits the locally generated operation data to the data aggregation device through a system data isolation device.

[0019] Correspondingly, the operation data of at least two nuclear power industry control system clusters is obtained through the system cluster port side isolation device, including:

[0020] The operation data of each nuclear power industrial control system cluster is obtained from the data aggregation device of each nuclear power industrial control system cluster through the system cluster port side isolation device.

[0021] In one of the embodiments, the nuclear power management server cluster comprises at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server and a threat intelligence server.

[0022] In the second aspect, the application further provides a global data control device for nuclear power plant industrial control system network security. The device comprises:

[0023] The management data acquisition module is configured to acquire nuclear power management data of the nuclear power management server cluster, wherein the nuclear power management data comprises network security data of the nuclear power plant industrial control system.

[0024] The operation data acquisition module is configured to acquire operation data of at least two nuclear power industrial control system clusters through the system cluster port side isolation device, wherein the cluster space isolation device is arranged between adjacent nuclear power plant system clusters.

[0025] The global data determination module is configured to process the operation data and the nuclear power management data to obtain global control data of the nuclear power plant.

[0026] The data transmission module is configured to transmit the global control data from the jurisdictional area inside the nuclear power plant to the jurisdictional area outside the nuclear power plant through the control side isolation device.

[0027] In the third aspect, the application further provides a central control device. The central control device comprises a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0028] The nuclear power management data of the nuclear power management server cluster is acquired, wherein the nuclear power management data comprises network security data of the nuclear power plant industrial control system.

[0029] The operation data of at least two nuclear power industrial control system clusters is obtained through the system cluster port side isolation device, wherein the cluster space isolation device is arranged between adjacent nuclear power plant system clusters.

[0030] The operation data and the nuclear power management data are processed to obtain global control data of the nuclear power plant.

[0031] The global control data is transmitted from the jurisdictional area inside the nuclear power plant to the jurisdictional area outside the nuclear power plant through the control side isolation device.

[0032] In a fourth aspect, the present application also provides a computer readable storage medium. The computer readable storage medium has a computer program stored thereon, and the computer program is executed by a processor to implement the following steps:

[0033] Obtaining nuclear power management data of a nuclear power management server cluster; the nuclear power management data comprises network security data of an industrial control system of a nuclear power plant;

[0034] Obtaining operation data of at least two nuclear power industrial control system clusters through a system cluster port side isolation device; wherein, a cluster space isolation device is configured between adjacent nuclear power plant system clusters;

[0035] Processing the operation data and the nuclear power management data to obtain global control data of the nuclear power plant;

[0036] Transmitting the global control data from an internal jurisdiction area of the nuclear power plant to an external jurisdiction area of the nuclear power plant through a control side isolation device.

[0037] In a fifth aspect, the present application also provides a global data control system for network security of an industrial control system of a nuclear power plant. The system comprises: a central control device, a nuclear power management server cluster, at least two nuclear power industrial control system clusters, a cluster space isolation device configured between adjacent nuclear power plant system clusters, a system cluster port side isolation device of each nuclear power plant system cluster, and a control side isolation device;

[0038] The nuclear power management server cluster is configured to store nuclear power management data; the nuclear power management data comprises network security data of an industrial control system of a nuclear power plant;

[0039] Each nuclear power industrial control system cluster is configured to store operation data of the nuclear power industrial control system cluster;

[0040] The central control device is configured to execute the steps of the global data control method for network security of an industrial control system of a nuclear power plant as described in any of the above embodiments.

[0041] In one of the embodiments, the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to a security level of the nuclear power industrial control system cluster, and the security level is directly proportional to a data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0042] In one of the embodiments, the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined according to a similarity of security levels of the adjacent nuclear power plant system clusters; and the similarity of the security levels is inversely proportional to a data unidirectional transmission isolation capability of the cluster space isolation device.

[0043] In one of the embodiments, the control side isolation device comprises a first control side isolation device between a production area and an office area in a jurisdiction within the nuclear power plant, and a second control side isolation device between the jurisdiction within the nuclear power plant and a jurisdiction outside the nuclear power plant, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0044] The global data control method and device for nuclear power plant industrial control system network security obtain nuclear power management data from each server, and operation data obtained from at least two nuclear power industrial control system clusters, and centrally manage and process the obtained data to obtain global control data of the nuclear power plant, so that the data of the whole plant is mastered. In addition, when obtaining the operation data obtained from each nuclear power industrial control system cluster, a system cluster port side isolation device is introduced, so that unidirectional transmission of the operation data is realized, confusion of the operation data of the nuclear power industrial control system cluster is avoided, and a cluster space isolation device is arranged between adjacent nuclear power plant system clusters, so that the independence between different nuclear power plant system clusters is ensured, that is, even if a certain area is threatened, it will not bring danger to its adjacent area, and the safety of the nuclear power plant is maximized. BRIEF DESCRIPTION OF DRAWINGS

[0045] Figure 1 An application environment diagram of the global data control method for nuclear power plant industrial control system network security in one embodiment;

[0046] Figure 2 A flowchart of the global data control method for nuclear power plant industrial control system network security in one embodiment;

[0047] Figure 3 A schematic diagram of a nuclear power management service cluster in one embodiment;

[0048] Figure 4 A partitioning diagram of different nuclear power industrial control system clusters in one embodiment;

[0049] Figure 5 A schematic diagram of the acquisition principle of operation data of a nuclear power industrial control system cluster and management data of a nuclear power management service cluster in one embodiment;

[0050] Figure 6 A schematic diagram of the acquisition principle of operation data of a nuclear power industrial control system cluster in one embodiment;

[0051] Figure 7 A schematic diagram of the principle of transmission of nuclear power plant data to a superior unit in one embodiment;

[0052] Figure 8A flowchart of a global data control method for network security of an industrial control system of a nuclear power plant in another embodiment;

[0053] Figure 9 A structure diagram of a nuclear power plant in an embodiment;

[0054] Figure 10 A structure block diagram of a global data control device for network security of an industrial control system of a nuclear power plant in an embodiment;

[0055] Figure 11 An internal structure diagram of a central control device in an embodiment. DETAILED DESCRIPTION

[0056] In order to make the purposes, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not used to limit the present application.

[0057] The global data control method for network security of an industrial control system of a nuclear power plant provided by the embodiments of the present application can be applied in the application environment as shown in Figure 1 In an embodiment, a central control device is provided, which can be a server, and an internal structure diagram of the central control device can be as shown in Figure 1 The central control device includes a processor, a memory and a network interface connected through a system bus. The processor of the central control device is used to provide computing and control capabilities. The memory of the central control device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the central control device is used to store data required for global data control processing for network security of an industrial control system of a nuclear power plant. The network interface of the central control device is used to communicate with an external terminal through a network connection. The computer program is executed by the processor to implement the global data control method for network security of an industrial control system of a nuclear power plant shown in any of the embodiments below.

[0058] In an embodiment, as shown in Figure 2 A global data control method for network security of an industrial control system of a nuclear power plant is provided, and the central control device in Figure 1 is taken as an example to illustrate the method, which includes the following steps:

[0059] S201, obtaining nuclear power management data of a nuclear power management server cluster.

[0060] Optionally, the nuclear power management data includes network security data of an industrial control system of a nuclear power plant.

[0061] Among them, such as Figure 3 As shown, the nuclear power management server cluster includes multiple nuclear power management servers. Each nuclear power management server can provide or store network security data of the nuclear power plant's industrial control system. The nuclear power management server may include data storage server, data analysis server, data interface server, endpoint security server, antivirus and patch server, emergency platform server, account management server, and threat intelligence server, etc.

[0062] The system comprises several components: a data storage server for storing all plant data, including data from each server, processing procedures, results, attacks encountered, attack processes, prevention methods, and personnel operation records; a data analysis server for processing all centrally managed data in the nuclear power plant using statistical analysis, data correlation, data modeling, and artificial intelligence methods, including deduplication, cleaning, classification, data filling, tagging, and normalization, and then storing the data in a categorized manner; a data interface server for connecting to external and higher-level units; and a global data control system for the nuclear power plant's industrial control system network security, which regularly generates nuclear power plant production safety analysis reports and operational analysis reports according to the requirements of national relevant departments for network security supervision and management, and the actual operation of each nuclear power industrial control system. These reports are periodically sent to higher-level units, and include the following content: This includes, but is not limited to, security incidents, alarm classifications, key cybersecurity incidents, and industrial control system operation events; the endpoint security server is used to guide security maintenance personnel to rectify system issues based on incidents occurring throughout the plant; the antivirus and patch server is used to patch viruses after they are detected, and to record and prevent such viruses; the emergency platform server is used to formulate emergency plans and send them to the central control equipment of the global data control system for the cybersecurity of the nuclear power plant's industrial control system. The central control equipment, based on the security incident level, invokes pre-set event push rules to push the security incident level to the plant-wide cybersecurity emergency response and management platform in real time, so that the plant-wide cybersecurity emergency response and management platform can execute the emergency plan based on the security incident level; the account management terminal is used to manage user accounts, including security management and management of the permission levels of each user; and the threat intelligence server is used to predict and display security threats to the entire plant.

[0063] Optionally, data from each of the aforementioned servers can be retrieved. Specifically, each nuclear power management server and central control device in the cluster is connected to a core network of a plant-wide industrial control system security management center, through which network security data of the nuclear power plant's industrial control system can be obtained.

[0064] S202, obtaining operation data of at least two nuclear power industry control system clusters through a system cluster port side isolation device.

[0065] The nuclear power industry control system cluster can be a cluster composed of nuclear power industry control systems with similar security levels, and can include a plurality of nuclear power industry control systems.

[0066] The number of the nuclear power industry control system clusters in the embodiment is at least two, and a cluster space isolation device is arranged between adjacent nuclear power industry control system clusters. The cluster space isolation device is used to separate adjacent nuclear power industry control system clusters to prevent data of the adjacent nuclear power industry control system clusters from flowing to each other, so that even if one nuclear power industry control system cluster is attacked by a network attack, the adjacent nuclear power industry control system cluster will not be affected by the attack.

[0067] Optionally, in the embodiment, the cluster space isolation device arranged between adjacent nuclear power plant system clusters can be determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters, and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device. For example, the security level of each nuclear power industry control system cluster can be determined according to the importance of the nuclear power industry control system cluster in the whole plant, and if the security levels of two adjacent nuclear power industry control system clusters are the same or similar, a cluster space isolation device with low unidirectional transmission capability (such as a logical isolation device) is arranged for the two adjacent nuclear power industry control system clusters to save cost. If the security levels of the two adjacent nuclear power industry control system clusters are quite different, a cluster space isolation device with high unidirectional transmission capability (such as a power unidirectional forward isolation device) is arranged for the two adjacent nuclear power industry control system clusters to maximize the safety.

[0068] Optionally, as shown in Figure 4 When the security levels of two nuclear power industry control system clusters are similar, such as the safety 1 area and the safety 2 area, a system cluster port side isolation device with low data unidirectional transmission isolation capability can be used to reduce cost; when the security levels of two nuclear power industry control system clusters are quite different, such as the safety 2 area and the production management area, a system cluster port side isolation device with high data unidirectional transmission isolation capability can be used to maximize the safety.

[0069] The system cluster port side isolation device can be a device for isolating the data transmission direction between the nuclear power industry control system cluster and the central control equipment, that is, the operation data of the nuclear power industry control system cluster can be transmitted to the central control equipment, but the data in the central control equipment cannot be transmitted reversely to the nuclear power industry control system cluster. Optionally, all the nuclear power industry control system clusters can correspond to the same system cluster port side isolation device, or each nuclear power industry control system cluster can correspond to one system cluster port side isolation device.

[0070] Optionally, since the stronger the one-way transmission capability of the isolation device is, the higher the cost is, in the embodiment, in order to save the cost, it is preferred that one exclusive system cluster port side isolation device is configured for each nuclear power industry control system cluster, wherein the system cluster port side isolation device corresponding to each nuclear power industry control system cluster is determined according to the safety level of each nuclear power industry control system cluster, and the safety level is directly proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.

[0071] Optionally, in the embodiment, if the nuclear power industry control system cluster corresponds to one common system cluster port side isolation device, at this time, the common system cluster port side isolation device can be used to interact with each nuclear power industry control system cluster to obtain the operation data of each nuclear power industry control system cluster; if the nuclear power industry control system cluster corresponds to a separate system cluster port side isolation device, at this time, the separate system cluster port side isolation device can be used to interact with each nuclear power industry control system cluster to obtain the operation data of each nuclear power industry control system cluster.

[0072] S203, processing the operation data and the nuclear power management data to obtain the global control data of the nuclear power plant.

[0073] Optionally, as shown in Figure 5 The nuclear power management data of the nuclear power management server cluster and the operation data of the nuclear power industry control system cluster obtained are sent to the central control equipment of the global data control system of the nuclear power plant industrial control system network security through the whole plant industrial control system security management center core network for collection, so as to obtain the global control data of the nuclear power plant.

[0074] Optionally, the central control equipment can also perform related processing on the received operation data and nuclear power management data, for example, situation display, monitoring and early warning, safe operation and maintenance, information sharing, asset management and safety analysis, emergency response, external interface, system management, system security management, audit management, self-safety requirement, data processing, data analysis, etc., and the processing results are also used as the global control data.

[0075] S204, transmitting the global control data from the in-plant jurisdiction to the out-plant jurisdiction of the nuclear power plant by controlling the side isolation device.

[0076] The control side isolation device is used to separate the in-plant jurisdiction from the out-plant jurisdiction of the nuclear power plant. Since the out-plant jurisdiction has lower safety and is more vulnerable to security attacks than the in-plant jurisdiction, the control side isolation device can protect the in-plant jurisdiction from attacks when the out-plant jurisdiction is attacked, greatly ensuring the safety of the in-plant jurisdiction.

[0077] The in-plant jurisdiction of the nuclear power plant refers to all areas within the nuclear power plant, including areas where the nuclear power management server cluster, the nuclear power industrial control system cluster, and the central control device of the global data control system of the nuclear power plant industrial control system network security are located. The out-plant jurisdiction of the nuclear power plant refers to other areas outside the in-plant jurisdiction, for example, it can include areas where the first superior nuclear power management device and the second superior nuclear power management device are located.

[0078] Optionally, the global control data can be transmitted from the in-plant jurisdiction to the out-plant jurisdiction of the nuclear power plant based on the optical signal conduction mode through the control side isolation device. For example, it can be transmitted to the first superior nuclear power management device and the second superior nuclear power management device in the out-plant jurisdiction.

[0079] The above embodiment obtains nuclear power management data from each server, and obtains running data from at least two nuclear power industrial control system clusters, and centrally manages and processes the obtained data to obtain global control data of the nuclear power plant, realizing the control of the global data of the nuclear power plant. In addition, when obtaining the running data from each nuclear power industrial control system cluster, a system cluster port side isolation device is introduced, thereby realizing one-way transmission of the running data, avoiding confusion of the running data of the nuclear power industrial control system cluster, and the adjacent nuclear power plant system clusters are configured with cluster space isolation devices, ensuring the independence between different nuclear power plant system clusters. Even if a certain area is threatened, it will not pose a danger to its adjacent areas, maximizing the safety of the nuclear power plant.

[0080] Optionally, each nuclear power industrial control system cluster of the embodiment can include at least two nuclear power industrial control systems and a data aggregation device, and each nuclear power industrial control system transmits locally generated running data to the data aggregation device through a system data isolation device. Correspondingly, the running data of at least two nuclear power industrial control system clusters is obtained through a system cluster port side isolation device, including obtaining the running data of each nuclear power industrial control system cluster from the data aggregation device of each nuclear power industrial control system cluster through the system cluster port side isolation device.

[0081] The data aggregation device can aggregate operation data of each nuclear power industry control system in a nuclear power industry control system cluster.

[0082] Optionally, a plurality of nuclear power industry control systems exist in the nuclear power plant, and the nuclear power industry control systems are classified according to corresponding safety levels, systems with similar or same safety levels are placed in a same area, each nuclear power industry control system in each area is taken as a nuclear power industry control system cluster, for example, a region corresponding to nuclear power industry control systems with high safety levels can be taken as a safety 1 area, a region corresponding to nuclear power industry control systems with medium safety levels can be taken as a safety 2 area, and a region corresponding to nuclear power industry control systems with low safety levels can be taken as a production management area. Figure 6 As shown in the figure, in each area, each nuclear power industry control system collects operation data of itself, including network original full flow, host log, security device log (self log and audit record), network device log, security policy, system operation log, security event data and industrial control system asset information, etc., each nuclear power industry control system transmits the collected data to the data aggregation device through the data collection network through the isolation device, the data aggregation device pre-processes the received data, including converting the data into visual data, such as code, and eliminating redundant and useless data, etc. The processed data is transmitted to the central control device of the global data control system of the nuclear power plant industrial control system network security through the system cluster port side isolation device and the whole plant industrial control system security management center core network.

[0083] Optionally, each nuclear power industry control system transmits respective operation data to the data aggregation device through the isolation device, the isolation device can prevent data backflow and prevent data of different systems from being confused, the pre-processed data is transmitted to the central control device of the global data control system of the nuclear power plant industrial control system network security through the system cluster port side isolation device and the whole plant industrial control system security management center core network, the system cluster port side isolation device can separate each nuclear power industry control system cluster from the whole plant industrial control system security management center core network, since the whole plant industrial control system security management center core network has a low safety level and is vulnerable to attacks, after being separated, even if the whole plant industrial control system security management center core network is attacked, the attacks will not affect the nuclear power industry control system cluster.

[0084] In order to make a more detailed description of the global data control method of the nuclear power plant industrial control system network security, on the basis of the above embodiment, the embodiment specifically describes how to transmit the global control data from the jurisdiction area in the nuclear power plant to the jurisdiction area outside the nuclear power plant, the method specifically includes:

[0085] The global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence; wherein, the first control side isolation device is located between the production area and the office area of the nuclear power plant internal jurisdiction, the second control side isolation device is located between the office area of the nuclear power plant internal jurisdiction and the nuclear power plant external jurisdiction, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0086] Specifically, the central control device of the global data control system of the nuclear power plant industrial control system network security transmits the global control data of the nuclear power plant from the production area of the nuclear power plant internal jurisdiction to the data management device of the office area of the nuclear power plant through the first control side isolation device, and then transmits the global control data of the nuclear power plant from the office area of the nuclear power plant to the first superior nuclear power management device of the nuclear power plant external jurisdiction through the second control side isolation device by the data management device of the office area.

[0087] Optionally, on the basis of the above embodiment, the global control data is transmitted from the nuclear power plant internal jurisdiction to the first superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, so that the first superior nuclear power management device transmits the global control data to the second superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device.

[0088] Optionally, as shown in the figure, Figure 7 the central control device of the global data control system of the nuclear power plant industrial control system network security transmits the global control data of the nuclear power plant from the production area of the nuclear power plant internal jurisdiction to the data management device of the office area of the nuclear power plant through the first control side isolation device, and then transmits the global control data of the nuclear power plant from the office area of the nuclear power plant to the first superior nuclear power management device of the nuclear power plant external jurisdiction through the second control side isolation device by the data management device of the office area, and the first superior nuclear power management device transmits the data to the second superior nuclear power management device through the first control side isolation device.

[0089] It should be noted that the central control device of the global data control system of the nuclear power plant industrial control system network security is located in the production area of the nuclear power plant jurisdiction, which has high security, while the office area of the nuclear power plant jurisdiction has low security. Therefore, the first control side isolation device (such as a physical single-conductor isolation device) with higher data unidirectional transmission isolation is used between the production area and the office area of the nuclear power plant jurisdiction. In this way, even if the office area is threatened by network security, the threat will not affect the production area of the nuclear power plant. The security of the office area is similar to that of the first upper nuclear power management device, so the second control side isolation device (such as a logical isolation device) with lower data unidirectional transmission isolation is used. This not only ensures safety to some extent, but also reduces the cost of the isolation device. The security of the second upper nuclear power management device is much lower than that of the first upper nuclear power management device, so the first control side isolation device (such as a physical single-conductor isolation device) with higher data unidirectional transmission isolation is used between the first upper nuclear power management device and the second upper nuclear power management device. In this way, even if the second upper nuclear power management device is threatened by network security, the threat will not affect the first upper nuclear power management device.

[0090] The above embodiment introduces two control side isolation devices when transmitting global control data from the nuclear power plant jurisdiction to the nuclear power plant jurisdiction, namely the first control side isolation device between the production area and the office area and the second control side isolation device between the office area and the nuclear power plant jurisdiction. Further, when the security of the nuclear power plant jurisdiction is relatively weak, the nuclear power plant jurisdiction will not be affected by the attack, and the safety of the nuclear power plant is maximized.

[0091] In order to more comprehensively display the present scheme, the present embodiment gives an optional way of a global data control method of nuclear power plant industrial control system network security, as shown in Figures 8-9

[0092] S801, obtaining nuclear power management data of a nuclear power management server cluster.

[0093] The nuclear power management data includes network security data of the nuclear power plant industrial control system.

[0094] For example, as shown in Figure 9 The central control device of the global data control system of the nuclear power plant industrial control system network security obtains the nuclear power management data of the nuclear power management server cluster, such as a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server, from the nuclear power management server cluster. The nuclear power management data of the nuclear power management server cluster is transmitted to the central control device of the global data control system of the nuclear power plant industrial control system network security via the core network of the plant industrial control system security management center.​

[0095] S802, obtaining the operation data of each nuclear power industrial control system cluster through the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster.

[0096] As shown in the example, Figure 9 The nuclear power industrial control system collects its own operation data, and sends the operation data to the data aggregation device through the isolation device for data preprocessing. The data aggregation device sends the preprocessed operation data to the central control device of the global data control system of the nuclear power plant industrial control system network security through the whole plant industrial control system security management center core network and the port side isolation device.

[0097] S803, processing the operation data and the nuclear power management data to obtain the global control data of the nuclear power plant.

[0098] As shown in the example, Figure 9 The central control device of the global data control system of the nuclear power plant industrial control system network security obtains the nuclear power management data of the nuclear power management server cluster and the operation data of the nuclear power industrial control system cluster through the whole plant industrial control system security management center core network, aggregates and processes the data, and finally obtains the global control data of the nuclear power plant.

[0099] S804, sequentially transmitting the global control data from the jurisdictional area of the nuclear power plant to the first superior nuclear power management device in the jurisdictional area outside the nuclear power plant through the first control side isolation device and the second control side isolation device, so that the first superior nuclear power management device transmits the global control data to the second superior nuclear power management device in the jurisdictional area outside the nuclear power plant through the first control side isolation device.

[0100] As shown in the example, Figure 9 The central control device of the global data control system of the nuclear power plant industrial control system network security transmits the global control data to the data management device in the office area of the nuclear power plant through the first control side isolation device; the data management device in the office area of the nuclear power plant transmits the global control data to the first superior nuclear power management device in the jurisdictional area outside the nuclear power plant through the second control side isolation device; and the first superior nuclear power management device transmits the global control data to the second superior nuclear power management device through the first control side isolation device.

[0101] The specific process of S801-S804 can be referred to the description of the above method embodiments, which has similar implementation principles and technical effects, and will not be repeated here.

[0102] It should be understood that although the steps in the flowcharts involved in the above embodiments are shown in sequence according to the arrows, the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, the execution of the steps is not strictly limited in sequence, and the steps can be executed in other orders. Moreover, at least some of the steps in the flowcharts involved in the above embodiments can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of the steps or stages is not necessarily sequential, but can be alternately or alternately executed with at least part of other steps or steps or stages in other steps.

[0103] Based on the same inventive concept, the embodiments of the present application also provide a nuclear power plant industrial control system network security global data control device for implementing the above-mentioned nuclear power plant industrial control system network security global data control method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more nuclear power plant industrial control system network security global data control device embodiments provided below can refer to the limitations of the nuclear power plant industrial control system network security global data control method described above, and will not be repeated here.

[0104] In one embodiment, as shown in Figure 10 A nuclear power plant industrial control system network security global data control device 10 is provided, comprising: a management data acquisition module 100, an operation data acquisition module 101, a global data determination module 102 and a data transmission module 103, wherein:

[0105] The management data acquisition module 100 is configured to acquire nuclear power management data of a nuclear power management server cluster. The nuclear power management data includes network security data of the nuclear power plant industrial control system.

[0106] The operation data acquisition module 101 is configured to acquire operation data of at least two nuclear power industrial control system clusters through a system cluster port side isolation device. The cluster space isolation device is configured between adjacent nuclear power plant system clusters.

[0107] The global data determination module 102 is configured to process the operation data and the nuclear power management data to obtain global control data of the nuclear power plant.

[0108] The data transmission module 103 is configured to transmit the global control data from a nuclear power plant jurisdiction area to a nuclear power plant external jurisdiction area through a control side isolation device.

[0109] In another embodiment, the running data acquisition module 101 is specifically configured to acquire the running data of each nuclear power industrial control system cluster through the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster.

[0110] The system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is directly proportional to the data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0111] In another embodiment, the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters; and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

[0112] In another embodiment, the data transmission module 103 in the above Figure 10 is specifically configured to sequentially transmit the global control data from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device; wherein the first control side isolation device is located between the production area and the office area of the nuclear power plant internal jurisdiction, the second control side isolation device is located between the office area of the nuclear power plant internal jurisdiction and the nuclear power plant external jurisdiction, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0113] In another embodiment, the data transmission module 103 in the above Figure 10 is also specifically configured to sequentially transmit the global control data from the nuclear power plant internal jurisdiction to the first superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device, so that the first superior nuclear power management device transmits the global control data to the second superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device.

[0114] In another embodiment, each nuclear power industrial control system cluster includes at least two nuclear power industrial control systems and a data aggregation device, and each nuclear power industrial control system transmits locally generated running data to the data aggregation device through a system data isolation device; accordingly, the running data of at least two nuclear power industrial control system clusters is acquired through the system cluster port side isolation device, including acquiring the running data of each nuclear power industrial control system cluster from the data aggregation device of each nuclear power industrial control system cluster through the system cluster port side isolation device.

[0115] In another embodiment, the nuclear power plant management server cluster includes at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server.

[0116] The modules in the global data control device for nuclear power plant industrial control system network security described above can be implemented wholly or partially by software, hardware, and combinations thereof. The modules described above can be embedded in or independent of the processor in the central control device in hardware form, or stored in the memory in the central control device in software form, so as to be called and executed by the processor to perform the operations corresponding to the modules.

[0117] In one embodiment, a central control device is provided, which can be a terminal, and its internal structure diagram can be as shown in Figure 11 The central control device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected through a system bus, and the communication interface, the display unit, and the input device are connected to the system bus through the input / output interface. The processor of the central control device is configured to provide computing and control capabilities. The memory of the central control device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The input / output interface of the central control device is configured to exchange information between the processor and external devices. The communication interface of the central control device is configured to perform wired or wireless communication with external terminals. The wireless communication can be achieved through WIFI, mobile cellular network, NFC (near field communication), or other technologies. The computer program is executed by the processor to implement a global data control method for nuclear power plant industrial control system network security. The display unit of the central control device is configured to form a visually visible picture, which can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the central control device can be a touch layer overlaid on the display screen, or a key, trackball, or touchpad arranged on the shell of the central control device, or an external keyboard, touchpad, or mouse, etc.

[0118] Those skilled in the art can understand that Figure 11 The structure shown in the above figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the central control device to which the scheme of the present application is applied. The specific central control device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0119] In one embodiment, a central control device is provided, comprising a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the following steps:

[0120] Obtaining nuclear power management data of a nuclear power management server cluster; the nuclear power management data comprising network security data of an industrial control system of a nuclear power plant;

[0121] Obtaining operation data of at least two nuclear power industrial control system clusters through a system cluster port side isolation device; wherein a cluster space isolation device is configured between adjacent nuclear power plant system clusters;

[0122] Processing the operation data and the nuclear power management data to obtain global control data of the nuclear power plant;

[0123] Transmitting the global control data from an internal jurisdiction area of the nuclear power plant to an external jurisdiction area of the nuclear power plant through a control side isolation device.

[0124] In one embodiment, the operation data of the at least two nuclear power industrial control system clusters is obtained through a system cluster port side isolation device, comprising:

[0125] Obtaining operation data of each nuclear power industrial control system cluster through a system cluster port side isolation device corresponding to each nuclear power industrial control system cluster;

[0126] Wherein the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is directly proportional to the data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0127] In one embodiment, the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters; and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

[0128] In one embodiment, the global control data is transmitted from the internal jurisdiction area of the nuclear power plant to the external jurisdiction area of the nuclear power plant through a control side isolation device, comprising:

[0129] Transmitting the global control data from the internal jurisdiction area of the nuclear power plant to the external jurisdiction area of the nuclear power plant through a first control side isolation device and a second control side isolation device in sequence; wherein the first control side isolation device is located between a production area and an office area of the internal jurisdiction area of the nuclear power plant, the second control side isolation device is located between the office area of the internal jurisdiction area of the nuclear power plant and the external jurisdiction area of the nuclear power plant, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0130] In one embodiment, the global control data is transmitted from the in-plant jurisdiction to the out-of-plant jurisdiction through the first control-side isolation device and the second control-side isolation device in sequence, including:

[0131] The global control data is transmitted from the in-plant jurisdiction to the out-of-plant jurisdiction through the first control-side isolation device and the second control-side isolation device in sequence, and the first superior nuclear power management device in the out-of-plant jurisdiction, so that the first superior nuclear power management device transmits the global control data to the second superior nuclear power management device in the out-of-plant jurisdiction through the first control-side isolation device.

[0132] In one embodiment, each nuclear power industry control system cluster includes at least two nuclear power industry control systems and a data aggregation device, and each nuclear power industry control system transmits locally generated operation data to the data aggregation device through a system data isolation device; accordingly, the processor, when executing the computer program, further implements the following steps:

[0133] The operation data of each nuclear power industry control system cluster is obtained from the data aggregation device of each nuclear power industry control system cluster through a system cluster port-side isolation device.

[0134] In one embodiment, the nuclear power management server cluster includes at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server.

[0135] In one embodiment, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program, and the computer program, when executed by a processor, implements the following steps:

[0136] The nuclear power management data of the nuclear power management server cluster is obtained; the nuclear power management data includes network security data of the nuclear power plant industry control system;

[0137] The operation data of at least two nuclear power industry control system clusters is obtained through a system cluster port-side isolation device; wherein, a cluster space isolation device is configured between adjacent nuclear power plant system clusters;

[0138] The operation data and the nuclear power management data are processed to obtain global control data of the nuclear power plant;

[0139] The global control data is transmitted from the in-plant jurisdiction to the out-of-plant jurisdiction through the control-side isolation device.

[0140] In one embodiment, the operation data of at least two nuclear power industry control system clusters is obtained through a system cluster port-side isolation device, including:

[0141] The operation data of each nuclear power industry control system cluster is obtained through the system cluster port side isolation device corresponding to each nuclear power industry control system cluster.

[0142] The system cluster port side isolation device corresponding to each nuclear power industry control system cluster is determined according to the security level of each nuclear power industry control system cluster, and the security level is directly proportional to the data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0143] In one embodiment, the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters; and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

[0144] In one embodiment, the global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the control side isolation device, including:

[0145] The global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence; wherein the first control side isolation device is located between the production area and the office area of the nuclear power plant internal jurisdiction, the second control side isolation device is located between the office area of the nuclear power plant internal jurisdiction and the nuclear power plant external jurisdiction, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0146] In one embodiment, the global control data is transmitted from the nuclear power plant internal jurisdiction to the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, including:

[0147] The global control data is transmitted from the nuclear power plant internal jurisdiction to the first upper-level nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, so that the first upper-level nuclear power management device transmits the global control data to the second upper-level nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device.

[0148] In one embodiment, each nuclear power industry control system cluster includes at least two nuclear power industry control systems and a data aggregation device, and each nuclear power industry control system transmits the locally generated operation data to the data aggregation device through a system data isolation device; correspondingly, the operation data of at least two nuclear power industry control system clusters is obtained through a system cluster port side isolation device, including:

[0149] The operation data of each nuclear power industry control system cluster is obtained from the data aggregation device of each nuclear power industry control system cluster through the system cluster port side isolation device.

[0150] In one embodiment, the nuclear power plant management server cluster comprises at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server.

[0151] In one embodiment, a global data control system for nuclear power plant industrial control system cybersecurity is provided. The system comprises a central control device, a nuclear power plant management server cluster, at least two nuclear power plant industrial control system clusters, a cluster space isolation device between adjacent nuclear power plant system clusters, a system cluster port side isolation device of each nuclear power plant system cluster, and a control side isolation device.

[0152] The nuclear power plant management server cluster is configured to store nuclear power plant management data, wherein the nuclear power plant management data comprises cybersecurity data of the nuclear power plant industrial control system.

[0153] Each nuclear power plant industrial control system cluster is configured to store operation data of the corresponding nuclear power plant industrial control system cluster.

[0154] The central control device is configured to perform the steps of the global data control method for nuclear power plant industrial control system cybersecurity as described in any of the above embodiments.

[0155] In one embodiment, the system cluster port side isolation device corresponding to each nuclear power plant industrial control system cluster is determined according to the security level of the corresponding nuclear power plant industrial control system cluster, and the security level is directly proportional to the data unidirectional transmission isolation capability of the system cluster port side isolation device.

[0156] In one embodiment, the cluster space isolation device between adjacent nuclear power plant system clusters is determined according to the similarity of the security levels of the adjacent nuclear power plant system clusters, and the similarity of the security levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

[0157] In one embodiment, the control side isolation device comprises a first control side isolation device between a production area and an office area within the jurisdiction of the nuclear power plant, and a second control side isolation device between the jurisdiction of the nuclear power plant and the jurisdiction outside the nuclear power plant, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

[0158] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0159] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.

[0160] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are all within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A global data control method for nuclear power plant industrial control system cyber security, characterized by, The application is applied to a central control device, which is arranged in a nuclear power plant jurisdiction; the nuclear power plant jurisdiction is also arranged with a nuclear power management server cluster and a nuclear power industry control system cluster; each nuclear power management server in the nuclear power management server cluster is connected with the central control device to a whole plant industrial control system safety management center core network; the method comprises the following steps: Obtaining nuclear power management data of the nuclear power management server cluster through the whole plant industrial control system safety management center core network; the nuclear power management data comprises network security data of a nuclear power plant industrial control system; Obtaining operation data of each nuclear power industry control system cluster through at least two common system cluster port side isolation devices corresponding to the nuclear power industry control system cluster and the whole plant industrial control system safety management center core network; wherein, a cluster space isolation device is arranged between adjacent nuclear power industry control system clusters; the system cluster port side isolation device is a device for isolating the data transmission direction between the nuclear power plant industrial control system and the central control device; Processing the operation data and the nuclear power management data to obtain global control data of the nuclear power plant; Transmitting the global control data from the nuclear power plant jurisdiction to a nuclear power plant external jurisdiction through a control side isolation device.

2. The method according to claim 1, wherein: The cluster space isolation device arranged between adjacent nuclear power industry control system clusters is determined according to the similarity of the safety levels of adjacent nuclear power industry control system clusters; and the similarity of the safety levels is inversely proportional to the data unidirectional transmission isolation capability of the cluster space isolation device.

3. The method of claim 1, wherein, The transmitting the global control data from the nuclear power plant jurisdiction to the nuclear power plant external jurisdiction through the control side isolation device comprises: Transmitting the global control data from the nuclear power plant jurisdiction to the nuclear power plant external jurisdiction through a first control side isolation device and a second control side isolation device in sequence; wherein, the first control side isolation device is located between a production area and an office area of the nuclear power plant jurisdiction, the second control side isolation device is located between the office area of the nuclear power plant jurisdiction and the nuclear power plant external jurisdiction, and the data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

4. The method of claim 3, wherein, The transmitting the global control data from the nuclear power plant jurisdiction to the nuclear power plant external jurisdiction through the control side isolation device comprises: Transmitting the global control data from the nuclear power plant jurisdiction to a first superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device and the second control side isolation device in sequence, so that the first superior nuclear power management device transmits the global control data to a second superior nuclear power management device of the nuclear power plant external jurisdiction through the first control side isolation device.

5. The method according to any one of claims 1-4, characterized in that, Each nuclear power industry control system cluster comprises at least two nuclear power industry control systems and a data aggregation device, and each nuclear power industry control system transmits locally generated operation data to the data aggregation device through a system data isolation device; Correspondingly, the operation data of the at least two nuclear power industrial control system clusters is acquired through the system cluster port side isolation device, and the operation data of the at least two nuclear power industrial control system clusters is acquired through the system cluster port side isolation device. The operation data of the at least two nuclear power industrial control system clusters is acquired through the system cluster port side isolation device.

6. The method according to any one of claims 1-4, characterized in that, The nuclear power management server cluster includes at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server and a threat intelligence server.

7. A global data control apparatus for nuclear power plant industrial control system cyber security, characterized by, The central control device is deployed in a nuclear power plant jurisdiction area; the nuclear power plant jurisdiction area is also deployed with a nuclear power management server cluster and a nuclear power industrial control system cluster; each nuclear power management server in the nuclear power management server cluster is connected to a plant industrial control system security management center core network with the central control device; The management data acquisition module is configured to acquire nuclear power management data of the nuclear power management server cluster through the plant industrial control system security management center core network; the nuclear power management data includes network security data of the nuclear power plant industrial control system; The operation data acquisition module is configured to acquire operation data of each nuclear power industrial control system cluster through the system cluster port side isolation device corresponding to the at least two nuclear power industrial control system clusters and the plant industrial control system security management center core network; wherein a cluster space isolation device is arranged between adjacent nuclear power industrial control system clusters; the system cluster port side isolation device is a device for isolating data transmission direction between the nuclear power plant industrial control system and the central control device; The global data determination module is configured to process the operation data and the nuclear power management data to obtain global control data of the nuclear power plant; The data transmission module is configured to transmit the global control data from the nuclear power plant jurisdiction area to a nuclear power plant external jurisdiction area through the control side isolation device.

8. A central control device comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor executes the computer program to realize the steps of the method of any one of claims 1 to 6.

9. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to realize the steps of the method of any one of claims 1 to 6.

10. A global data control system for nuclear power plant industrial control system cyber security, characterized by, The system includes a central control device, a nuclear power management server cluster, at least two nuclear power industrial control system clusters, a cluster space isolation device between adjacent nuclear power industrial control system clusters, a system cluster port side isolation device of each nuclear power industrial control system cluster, and a control side isolation device; the central control device is deployed in a nuclear power plant jurisdiction area; the nuclear power plant jurisdiction area is also deployed with a nuclear power management server cluster and a nuclear power industrial control system cluster; the system cluster port side isolation device is a device for isolating data transmission direction between the nuclear power plant industrial control system and the central control device; each nuclear power management server in the nuclear power management server cluster is connected to a plant industrial control system security management center core network with the central control device; The nuclear power management server cluster is configured to store nuclear power management data; the nuclear power management data comprises network security data of a nuclear power plant industrial control system; Each nuclear power industrial control system cluster is configured to store operation data of each nuclear power industrial control system cluster. The central control device is configured to execute steps of the method in any one of claims 1 to 6.

11. The system of claim 10, wherein, The system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to a security level of each nuclear power industrial control system cluster, and the security level is directly proportional to a data unidirectional transmission isolation capability of the system cluster port side isolation device.

12. The system of claim 10, wherein, The cluster space isolation device configured between adjacent nuclear power industrial control system clusters is determined according to a similarity of security levels of adjacent nuclear power industrial control system clusters, and the similarity of the security levels is inversely proportional to a data unidirectional transmission isolation capability of the cluster space isolation device.

13. The system of claim 10, wherein, The control side isolation device comprises a first control side isolation device located between a production area and an office area in a jurisdictional area of the nuclear power plant, and a second control side isolation device located between the jurisdictional area of the nuclear power plant and a jurisdictional area outside the nuclear power plant, and a data unidirectional transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.

Images