Substation equipment information configuration management method, device, equipment and storage medium

Abstract

The present invention discloses a method, apparatus, device, and storage medium for substation equipment information configuration management. The method includes: obtaining the device address and port information of a firewall in a substation to be configured, and obtaining an address and port association information table of a main substation associated with the substation to be configured; if a device address matching the device address information exists in the address association table, determining a first target business system; if a device port matching the device port information exists in the port association table, determining a second target business system; if the first target business system and the second target business system are the same, associating the device address information and the device port information with the first target business system to obtain a third association; generating a substation equipment information configuration table including the third association, and performing equipment information configuration management on the substation to be configured based on the substation equipment information configuration table.

Description

Technical Field

[0001] The present invention relates to the technical field of substation safety management, and in particular to a substation equipment information configuration management method, device, equipment and storage medium. Background Art

[0002] With the increasing use of substations, substation security management has become increasingly important. Current security information management methods for substation equipment typically rely on manually generating site security plans based on existing business processes, which are then manually reviewed by relevant technical personnel. This existing approach to managing substation equipment security information is inefficient, and manually generating and managing plans often results in low accuracy. Summary of the Invention

[0003] The present invention provides a substation equipment information configuration management method, device, equipment and storage medium to improve the efficiency of substation equipment information security management and improve the accuracy of generating substation equipment security management solutions.

[0004] According to one aspect of the present invention, a method for substation equipment information configuration management is provided, the method comprising:

[0005] Acquire address policy configuration data of a firewall in a substation to be configured; the address configuration policy data includes device address information and device port information; and,

[0006] Obtaining an address association information table and a port association information table of a main substation associated with the substation to be configured; the address configuration management information table includes a first association relationship between a device address associated with the main substation and a device service system; the port information association table includes a second association relationship between a device port of the main substation and a device service system;

[0007] If a device address matching the device address information exists in the address association table, determining a first target service system associated with the matching device address according to the first association; and

[0008] If a device port matching the device port information exists in the port association relationship table, determining a second target service system associated with the matching device port according to the second association relationship;

[0009] If the first target business system and the second target business system are the same device business system, then associating the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship;

[0010] A substation equipment information configuration table including the third association relationship is generated, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

[0011] According to another aspect of the present invention, there is provided a substation equipment information configuration management device, comprising:

[0012] A policy configuration data acquisition module is used to obtain the address policy configuration data of the firewall to be configured in the substation; the address configuration policy data includes device address information and device port information; and

[0013] An information table acquisition module is configured to acquire an address association information table and a port association information table of a main substation associated with the substation to be configured; the address configuration management information table includes a first association relationship between a device address associated with the main substation and a device service system; the port information association table includes a second association relationship between a device port of the main substation and a device service system;

[0014] A first business system determining module is configured to determine, if a device address matching the device address information exists in the address association table, a first target business system associated with the matching device address based on the first association relationship; and

[0015] a second business system determining module configured to determine, if a device port matching the device port information exists in the port association relationship table, a second target business system associated with the matching device port according to the second association relationship;

[0016] a third association relationship determination module, configured to, if the first target business system and the second target business system are the same device business system, associate the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship;

[0017] The information configuration table generating module is used to generate a substation equipment information configuration table including the third association relationship, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

[0018] According to another aspect of the present invention, an electronic device is provided, comprising:

[0019] at least one processor; and

[0020] a memory communicatively connected to the at least one processor; wherein,

[0021] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the substation equipment information configuration management method according to any embodiment of the present invention.

[0022] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the substation equipment information configuration management method according to any embodiment of the present invention when executed.

[0023] The technical solution of the embodiment of the present invention obtains the device address and port information of the firewall in the substation to be configured, and obtains the address and port association information table of the main substation associated with the substation to be configured; if there is a device address matching the device address information in the address association table, the first target business system is determined; if there is a device port matching the device port information in the port association table, the second target business system is determined; if the first target business system and the second target business system are the same, the device address information and the device port information are associated with the first target business system to obtain a third association; a substation equipment information configuration table including the third association is generated, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table. The above technical solution obtains the association between the equipment address and equipment port of the main substation and the equipment business system, thereby determining the equipment business system corresponding to the equipment address and equipment port of the substation to be configured, thereby realizing the automated determination of the equipment information configuration of the substation to be configured, without the need for relevant personnel to manually configure and manage the information of the substation equipment, thereby improving the efficiency of the security management of the substation equipment information, and improving the accuracy of the generated substation equipment information configuration, thereby more accurately managing the security of the substation equipment information.

[0024] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0026] Figure 1 This is a flow chart of a method for substation equipment information configuration management provided according to the first embodiment of the present invention;

[0027] Figure 2 This is a flow chart of a substation equipment information configuration management method provided according to the second embodiment of the present invention;

[0028] Figure 3 This is a structural diagram of a substation equipment information configuration management device provided according to a third embodiment of the present invention;

[0029] Figure 4 It is a structural diagram of an electronic device for implementing the substation equipment information configuration management method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0030] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0031] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0032] Example 1

[0033] Figure 1 This is a flowchart of a substation equipment information configuration management method provided in Example 1 of the present invention. This embodiment is applicable to situations where security management of substation-related equipment information configuration is performed. The method can be executed by a substation equipment information configuration management device. The substation equipment information configuration management device can be implemented in the form of hardware and / or software, and the substation equipment information configuration management device can be configured in an electronic device.

[0034] S110. Acquire address policy configuration data of a firewall in a substation to be configured; the address configuration policy data includes device address information and device port information.

[0035] The substation to be configured can be deployed in any area and is to be managed for equipment security. The substation to be configured is associated with a firewall device, an encryption device, a switch, and at least one host device connected to the switch.

[0036] The firewall device stores address configuration policy data and can be directly accessed. The firewall device's address configuration policy data includes device address information and device port information. The device address information may include the address information of at least one host or other device associated with the substation to be configured; the device port information may include the port information of at least one host or other device associated with the substation to be configured.

[0037] It should be noted that different host devices are associated with different business systems. Accordingly, the business systems associated with different addresses or ports may be the same or different. For example, the business system corresponding to address A may be a situational awareness system, while the business system corresponding to address B may be a motion system.

[0038] S120. Obtain the address association information table and port association information table of the main substation associated with the substation to be configured; the address configuration management information table includes the first association relationship between the device address associated with the main substation and the device business system; the port information association table includes the second association relationship between the device port of the main substation and the device business system.

[0039] The main substation may be a plant station, that is, a main station, and there may be one or more substations associated with the main substation. The address association information table and port association information table of the main substation may be directly obtained.

[0040] It should be noted that the substation to be configured can be a newly added substation with associated equipment with the main substation, or it can be a substation with equipment that has been associated with the main substation in the past. Whether it is a newly added substation to be configured or a historical substation to be configured, its equipment configuration information may be incomplete, that is, it is impossible to determine the business system and other information associated with each device address. Therefore, by obtaining some equipment configuration information from the main substation, the equipment configuration information of the substation to be configured can be improved.

[0041] The address association information table includes the first association between the device addresses associated with the main substation and the device service system. For example, the device address 10.60.1.2 is associated with the Situational Awareness System, and the corresponding device name is Situational Awareness Device; the device address 10.60.1.3 is associated with the Motion System, and the corresponding device name is Motion Terminal. The association between the device address and the device service system is the first association.

[0042] The port association information table includes the second association between the equipment ports associated with the main substation and the equipment service system. For example, the equipment service system associated with equipment port 2 is the situational awareness system, and the corresponding device name is situational awareness device; the equipment service system associated with equipment address 3 is the source maintenance system, and the corresponding device name is maintenance terminal. The association between the equipment port and the equipment service system is the second association.

[0043] It should be noted that the order between S110 and S120 can be S110 before S120, S110 after S120, or S110 and S120 can be executed in parallel, which is not limited in this embodiment.

[0044] S130: If a device address matching the device address information exists in the address association table, determine a first target service system associated with the matching device address according to the first association relationship.

[0045] The address association table includes address information of at least one device address.

[0046] Exemplarily, if the device address information exists in the address association table, the device business system corresponding to the device address information is determined according to the first association in the address association table, and the device business system corresponding to the device address information is determined as the first target business system.

[0047] S140: If a device port matching the device port information exists in the port association relationship table, determine a second target service system associated with the matching device port according to the second association relationship.

[0048] The port association table includes port information of at least one device port.

[0049] Exemplarily, if the device port information exists in the device association table, the device service system corresponding to the device port information is determined according to the second association in the port association table, and the device service system corresponding to the device port information is determined as the second target service system.

[0050] It should be noted that the order between S130 and S140 can be S130 before S140, S130 after S140, or S130 and S140 can be executed in parallel, which is not limited in this embodiment.

[0051] S150: If the first target business system and the second target business system are the same device business system, associate the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship.

[0052] For example, if the first target business system and the second target business system are the same device business system, this indicates that the device is in a communication connection with the main substation. The device address information and device port information can be associated with the first target business system or the second target business system to obtain a third association relationship. For example, if the device address information is 10.60.1.2, the device port information is 20, and the first target business system or the second target business system is a situational awareness system, then the third association relationship is: the device address information 10.60.1.2 corresponds to the device port information 20, and the corresponding device business system is a situational awareness system.

[0053] For example, if the first target business system and the second target business system are the same device business system, it indicates that the device is not associated with the main substation, and the device information of the device cannot be configured through the device information of the main substation.

[0054] S160: Generate a substation equipment information configuration table including the third association relationship, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

[0055] For example, a substation equipment information configuration table including a third association relationship can be generated. Subsequently, the equipment business system corresponding to the equipment address or equipment port, or the device name corresponding to the equipment business system, etc. can be queried or updated based on the equipment information configuration table to realize equipment information configuration management of the substation to be configured.

[0056] The technical solution of the embodiment of the present invention obtains the device address and port information of the firewall in the substation to be configured, and obtains the address and port association information table of the main substation associated with the substation to be configured; if there is a device address matching the device address information in the address association table, the first target business system is determined; if there is a device port matching the device port information in the port association table, the second target business system is determined; if the first target business system and the second target business system are the same, the device address information and the device port information are associated with the first target business system to obtain a third association; a substation equipment information configuration table including the third association is generated, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table. The above technical solution obtains the association between the equipment address and equipment port of the main substation and the equipment business system, thereby determining the equipment business system corresponding to the equipment address and equipment port of the substation to be configured, thereby realizing the automated determination of the equipment information configuration of the substation to be configured, without the need for relevant personnel to manually configure and manage the information of the substation equipment, thereby improving the efficiency of the security management of the substation equipment information, and improving the accuracy of the generated substation equipment information configuration, thereby more accurately managing the security of the substation equipment information.

[0057] Example 2

[0058] Figure 2 This is a flow chart of a substation equipment information configuration management method provided in the second embodiment of the present invention. This embodiment is optimized and improved on the basis of the above technical solutions.

[0059] Furthermore, after the step of "generating a substation equipment information configuration table including a third association relationship", the step of "obtaining the Address Resolution Protocol ARP table of the switch in the substation to be configured; the ARP table includes the port correspondence between the local device port and the opposite device port; the opposite device port is the device port deployed in the main substation; according to the second association relationship, determining the first opposite device service system corresponding to the opposite device port; and, according to the third association relationship, determining the first local device service system corresponding to the local device port; based on the local device port, the first local device service system, the opposite device port and the first opposite device service system, generating an interconnection interface information configuration table based on the port correspondence, and updating the substation equipment information configuration table according to the interconnection interface information configuration table" is added to improve the substation equipment information configuration table and realize the update of the substation equipment information configuration table. It should be noted that for the parts not described in detail in the embodiments of the present invention, please refer to the description of other embodiments.

[0060] like Figure 2 As shown, the method includes the following specific steps:

[0061] S210: Acquire address policy configuration data of a firewall in a substation to be configured; the address configuration policy data includes device address information and device port information.

[0062] S220. Obtain the address association information table and port association information table of the main substation associated with the substation to be configured; the address configuration management information table includes the first association relationship between the device address associated with the main substation and the device business system; the port information association table includes the second association relationship between the device port of the main substation and the device business system.

[0063] S230: If a device address matching the device address information exists in the address association relationship table, determine a first target service system associated with the matching device address according to the first association relationship.

[0064] S240: If a device port matching the device port information exists in the port association relationship table, determine a second target service system associated with the matching device port according to the second association relationship.

[0065] S250: If the first target business system and the second target business system are the same device business system, associate the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship.

[0066] S260: Generate a substation equipment information configuration table including the third association relationship, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

[0067] S270. Obtain the Address Resolution Protocol (ARP) table of the switch in the substation to be configured. The ARP table includes the port correspondence between the local device port and the opposite device port. The opposite device port is the device port deployed in the main substation.

[0068] The ARP (Address Resolution Protocol) table stores the correspondence between the local device port and the peer device port. The local device can be a switch associated with the substation to be configured, and the peer device is a device deployed in the main substation, such as a host device.

[0069] The ARP table may also record the correspondence between the IP (Internet Protocol) address and the MAC (Media Access Control Address) address of the local device, as well as the IP address and MAC address of the peer device.

[0070] S280: Determine the first opposite-end device service system corresponding to the opposite-end device port according to the second association relationship.

[0071] For example, it can be determined whether the peer device port exists in the port information association table of the main substation. If so, the device service system corresponding to the peer device port can be determined based on the second association relationship, and the device service system corresponding to the peer device port can be determined as the first peer device service system. If the peer device port does not exist in the port information association table of the main substation, relevant technical personnel can manually check whether there is any missing information in the port information association table and update the port information association table based on the determination result.

[0072] S290: Determine a first local device service system corresponding to the local device port according to the third association relationship.

[0073] Illustratively, the device service system corresponding to the local device port may be determined based on the third association relationship, and the device service system corresponding to the local device port may be determined as the first local device service system.

[0074] S2100. Generate an interconnection interface information configuration table based on the port correspondence relationship according to the local device port, the first local device service system, the opposite device port and the first opposite device service system, and update the substation device information configuration table according to the interconnection interface information configuration table.

[0075] Exemplarily, an association relationship can be established between the local device port, the first local device business system, the opposite device port and the first opposite device business system to generate an interconnection interface information configuration table, and a substation equipment information configuration table including the interconnection interface information configuration table is generated to realize the update of the substation equipment information configuration table.

[0076] The technical solution of this embodiment is achieved by obtaining the Address Resolution Protocol ARP table of the switch in the substation to be configured; the ARP table includes the port correspondence between the local device port and the opposite device port; the opposite device port is the device port deployed in the main substation; according to the second association relationship, the first opposite device service system corresponding to the opposite device port is determined; and according to the third association relationship, the first local device service system corresponding to the local device port is determined; based on the local device port, the first local device service system, the opposite device port and the first opposite device service system, based on the port correspondence, an interconnection interface information configuration table is generated, and according to the interconnection interface information configuration table, the substation equipment information configuration table is updated. The above technical solution realizes the update of the substation equipment information configuration table, making the configuration information in the substation equipment information table more complete, thereby facilitating the subsequent better management of the information configuration of the substation to be configured.

[0077] In an optional embodiment, first routing configuration information of a switch in a substation to be configured is obtained; the first routing configuration information includes next-hop address information of the switch; a next-hop device of the switch is determined based on the third association relationship according to the next-hop address information of the switch; a first routing configuration information table is generated according to the next-hop address information of the switch and the next-hop device of the switch, and the substation device information configuration table is updated according to the first routing configuration information table.

[0078] The first routing configuration information may include the switch next hop address information and the target address network segment, etc.

[0079] For example, based on the third association, the next-hop device corresponding to the switch next-hop address information can be determined, and an association between the switch next-hop address information and the switch next-hop device can be generated, thereby generating a first routing configuration information table including the association. A substation equipment information configuration table including the first routing configuration information table is generated to update the substation equipment information configuration table.

[0080] In an optional embodiment, after generating the substation equipment information configuration table including the third association relationship, it also includes: obtaining the second routing configuration information of the firewall in the substation to be configured; the second routing configuration information center includes the firewall next hop address information; according to the firewall next hop address information, based on the third association relationship, determining the firewall next hop device; generating a second routing configuration information table according to the firewall next hop address information and the firewall next hop device, and updating the substation equipment information configuration table according to the second routing configuration information table.

[0081] For example, based on the third association, the firewall next-hop device corresponding to the firewall next-hop address information can be determined, and an association between the firewall next-hop address information and the firewall next-hop device can be generated, thereby generating a second routing configuration information table including the association. A substation equipment information configuration table including the second routing configuration information table can be generated to update the substation equipment information configuration table.

[0082] In an optional embodiment, after generating the substation equipment information configuration table including the third association relationship, it also includes: obtaining the network address translation NAT configuration information of the firewall in the substation to be configured; the NAT configuration information includes real-time address information; according to the real-time address information, based on the third association relationship, determining the real-time equipment business system; generating a NAT configuration information table based on the real-time equipment business system and the real-time address information, and updating the substation equipment information configuration table based on the NAT configuration information table.

[0083] The NAT (Network Address Translator) configuration information may include real-time address information and non-real-time address information.

[0084] For example, it can be determined whether the real-time address information exists in the third association relationship. If so, the device service system corresponding to the real-time address information is determined based on the third association relationship, and the device service system is determined as the real-time device service system. An association relationship is established between the real-time device service system and the real-time address information, and a NAT configuration information table including the association relationship is generated. A substation device information configuration table including the NAT configuration information table is generated to update the substation device information configuration table.

[0085] In an optional embodiment, after generating the substation equipment information configuration table including the third association relationship, it also includes: obtaining the tunnel configuration information of the encryption device in the substation to be configured; the tunnel configuration information includes the address correspondence between the tunnel local address and the tunnel opposite address; the tunnel opposite address is the device address deployed in the main substation; according to the second association relationship, determining the second opposite-end device business system corresponding to the tunnel opposite address; and, according to the third association relationship, determining the second local-end device business system corresponding to the tunnel local address; based on the address correspondence, generating a tunnel information configuration table according to the tunnel opposite address, the first opposite-end device business system, the tunnel local address and the second local-end device business system, and updating the substation equipment information configuration table according to the tunnel information configuration table.

[0086] Exemplarily, it is possible to determine whether the tunnel peer address exists in the address association information table. If so, the device service system corresponding to the tunnel peer address is determined based on the second association relationship, and the device service system is determined as the second peer device service system. Based on the third association relationship, the device service system corresponding to the tunnel local address is determined, and the device service system is determined as the second local device service system. An association relationship is established between the tunnel peer address, the first peer device service system, the tunnel local address, and the second local device service system, and a tunnel information configuration table including the association relationship is generated. A substation equipment information configuration table including the tunnel information configuration table is generated to update the substation equipment information configuration table.

[0087] Example 3

[0088] Figure 3This is a schematic diagram of the structure of a substation equipment information configuration management device provided by the third embodiment of the present invention. The substation equipment information configuration management device provided by the embodiment of the present invention is applicable to the situation where the information configuration of substation-related equipment is securely managed. The substation equipment information configuration management device can be implemented in the form of hardware and / or software, such as Figure 3 As shown, the device specifically includes: a policy configuration data acquisition module 301, an information table acquisition module 302, a first business system determination module 303, a second business system determination module 304, a third association relationship determination module 305 and an information configuration table generation module 306.

[0089] The policy configuration data acquisition module 301 is used to obtain the address policy configuration data of the firewall to be configured in the substation; the address configuration policy data includes device address information and device port information; and

[0090] An information table acquisition module 302 is configured to acquire an address association information table and a port association information table of a master substation associated with the substation to be configured; the address configuration management information table includes a first association relationship between a device address associated with the master substation and a device service system; the port information association table includes a second association relationship between a device port of the master substation and a device service system;

[0091] A first business system determination module 303 is configured to determine, if a device address matching the device address information exists in the address association table, a first target business system associated with the matching device address based on the first association relationship; and

[0092] A second business system determining module 304 is configured to determine, if a device port matching the device port information exists in the port association relationship table, a second target business system associated with the matching device port according to the second association relationship;

[0093] a third association relationship determination module 305 configured to, if the first target business system and the second target business system are the same device business system, associate the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship;

[0094] The information configuration table generating module 306 is configured to generate a substation equipment information configuration table including the third association relationship, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

[0095] The technical solution of the embodiment of the present invention obtains the device address and port information of the firewall in the substation to be configured, and obtains the address and port association information table of the main substation associated with the substation to be configured; if there is a device address matching the device address information in the address association table, the first target business system is determined; if there is a device port matching the device port information in the port association table, the second target business system is determined; if the first target business system and the second target business system are the same, the device address information and the device port information are associated with the first target business system to obtain a third association; a substation equipment information configuration table including the third association is generated, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table. The above technical solution obtains the association between the equipment address and equipment port of the main substation and the equipment business system, thereby determining the equipment business system corresponding to the equipment address and equipment port of the substation to be configured, thereby realizing the automated determination of the equipment information configuration of the substation to be configured, without the need for relevant personnel to manually configure and manage the information of the substation equipment, thereby improving the efficiency of the security management of the substation equipment information, and improving the accuracy of the generated substation equipment information configuration, thereby more accurately managing the security of the substation equipment information.

[0096] Optionally, the device further includes:

[0097] An ARP table acquisition module is configured to, after generating the substation equipment information configuration table including the third association relationship, acquire an Address Resolution Protocol (ARP) table of a switch in the substation to be configured; the ARP table includes a port correspondence between a local device port and a peer device port; the peer device port is a device port deployed in the main substation;

[0098] A first peer device determining module is configured to determine a first peer device service system corresponding to the peer device port according to the second association relationship; and

[0099] A first local device determining module, configured to determine a first local device service system corresponding to the local device port according to the third association relationship;

[0100] An interface configuration table generation module is used to generate an interconnection interface information configuration table based on the port correspondence relationship according to the local device port, the first local device business system, the opposite device port and the first opposite device business system, and update the substation equipment information configuration table according to the interconnection interface information configuration table.

[0101] Optionally, the device further includes:

[0102] A first configuration information acquisition module is configured to acquire first routing configuration information of a switch in the substation to be configured; the first routing configuration information includes the next hop address information of the switch;

[0103] a switch device determining module, configured to determine a next-hop device of the switch based on the third association relationship according to the next-hop address information of the switch;

[0104] The first configuration table updating module is configured to generate a first routing configuration information table according to the switch next-hop address information and the switch next-hop device, and update the substation equipment information configuration table according to the first routing configuration information table.

[0105] Optionally, the device further includes:

[0106] A second configuration information acquisition module is configured to acquire second routing configuration information of the firewall in the substation to be configured after generating the substation equipment information configuration table including the third association relationship; the second routing configuration information center includes the firewall next hop address information;

[0107] a firewall device determining module, configured to determine a firewall next-hop device according to the firewall next-hop address information and based on the third association relationship;

[0108] The second configuration table updating module is used to generate a second routing configuration information table according to the firewall next-hop address information and the firewall next-hop device, and update the substation equipment information configuration table according to the second routing configuration information table.

[0109] Optionally, the device further includes:

[0110] A NAT configuration information acquisition module is used to obtain the network address translation NAT configuration information of the firewall in the substation to be configured after generating the substation equipment information configuration table including the third association relationship; the NAT configuration information includes real-time address information;

[0111] a real-time device system determination module, configured to determine a real-time device service system according to the real-time address information and based on the third association relationship;

[0112] The third configuration table updating module is configured to generate a NAT configuration information table according to the real-time device service system and the real-time address information, and update the substation equipment information configuration table according to the NAT configuration information table.

[0113] Optionally, the device further includes:

[0114] a tunnel configuration information acquisition module, configured to, after generating the substation equipment information configuration table including the third association relationship, acquire tunnel configuration information of the encryption device in the substation to be configured; the tunnel configuration information includes an address correspondence between a local tunnel address and a peer tunnel address; the peer tunnel address is an address of a device deployed in the main substation;

[0115] A second peer system determining module is configured to determine a second peer device service system corresponding to the tunnel peer address according to the second association relationship; and

[0116] A second local end system determination module is used to determine the second local end device service system corresponding to the local end address of the tunnel according to the third association relationship;

[0117] The fourth configuration table update module is used to generate a tunnel information configuration table based on the address correspondence relationship according to the tunnel peer address, the first peer device business system, the tunnel local address and the second local device business system, and update the substation equipment information configuration table according to the tunnel information configuration table.

[0118] The substation equipment information configuration management device provided by the embodiment of the present invention can execute the substation equipment information configuration management method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0119] Example 4

[0120] Figure 4 A schematic diagram of the structure of an electronic device 40 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0121] like Figure 4As shown, the electronic device 40 includes at least one processor 41 and a memory, such as a read-only memory (ROM) 42, a random access memory (RAM) 43, etc., which is communicatively connected to the at least one processor 41. The memory stores a computer program that can be executed by the at least one processor, and the processor 41 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 42 or the computer program loaded from the storage unit 48 into the random access memory (RAM) 43. Various programs and data required for the operation of the electronic device 40 can also be stored in the RAM 43. The processor 41, ROM 42, and RAM 43 are connected to each other via a bus 44. An input / output (I / O) interface 45 is also connected to the bus 44.

[0122] Multiple components in the electronic device 40 are connected to the I / O interface 45, including an input unit 46, such as a keyboard, a mouse, etc.; an output unit 47, such as various types of displays, speakers, etc.; a storage unit 48, such as a magnetic disk, an optical disk, etc.; and a communication unit 49, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 49 allows the electronic device 40 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0123] The processor 41 can be any general-purpose and / or specialized processing component with processing and computing capabilities. Some examples of the processor 41 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various specialized artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 41 executes the various methods and processes described above, such as the substation equipment information configuration management method.

[0124] In some embodiments, the substation equipment information configuration management method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as storage unit 48. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 40 via ROM 42 and / or communication unit 49. When the computer program is loaded into RAM 43 and executed by processor 41, one or more steps of the substation equipment information configuration management method described above can be performed. Alternatively, in other embodiments, processor 41 can be configured to execute the substation equipment information configuration management method in any other appropriate manner (e.g., by means of firmware).

[0125] Various embodiments of the systems and techniques described herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), system-on-chip systems (SOCs), programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include being implemented in one or more computer programs that are executable and / or interpreted on a programmable system that includes at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0126] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer program may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0127] In the context of the present invention, computer-readable storage media can be tangible media that can contain or store a computer program for use with an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. Computer-readable storage media can include but are not limited to electronic, magnetic, optical, electromagnetic, infrared or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, computer-readable storage media can be machine-readable signal media. More specific examples of machine-readable storage media can include electrical connections based on one or more lines, portable computer disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), optical fibers, portable compact disk read-only memories (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0128] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0129] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0130] A computing system may include clients and servers. The clients and servers are typically remote from each other and typically interact via a communication network. This client-server relationship arises through computer programs running on the respective computers, creating a client-server relationship. The server may be a cloud server, also known as a cloud computing server or cloud host. This server is a hosting product within the cloud computing service ecosystem that addresses the management difficulties and limited scalability of traditional physical hosting and VPS services.

[0131] It should be understood that the various forms of the processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the present invention can be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved. This is not limited herein.

[0132] The above specific embodiments do not limit the scope of protection of the present invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention are intended to be included within the scope of protection of the present invention.

Claims

1. A method for substation equipment information configuration management, characterized in that: include: Acquire address policy configuration data of a firewall in a substation to be configured; the address policy configuration data includes device address information and device port information; as well as, Obtain an address association information table and a port association information table of a main substation associated with the substation to be configured; the address association information table includes a first association relationship between a device address associated with the main substation and a device service system; the port association information table includes a second association relationship between a device port of the main substation and a device service system; If a device address matching the device address information exists in the address association table, determining a first target service system associated with the matching device address according to the first association; and If a device port matching the device port information exists in the port association relationship table, determining a second target service system associated with the matching device port according to the second association relationship; If the first target business system and the second target business system are the same device business system, then associating the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship; A substation equipment information configuration table including the third association relationship is generated, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

2. The method according to claim 1, characterized in that After generating the substation equipment information configuration table including the third association relationship, the method further includes: Obtaining an Address Resolution Protocol (ARP) table of a switch in the substation to be configured; the ARP table includes a port correspondence between a local device port and a peer device port; the peer device port is a device port deployed in the main substation; Determining a first peer device service system corresponding to the peer device port according to the second association relationship; and Determining, according to the third association relationship, a first local device service system corresponding to the local device port; According to the local device port, the first local device business system, the opposite device port and the first opposite device business system, based on the port correspondence, an interconnection interface information configuration table is generated, and according to the interconnection interface information configuration table, the substation equipment information configuration table is updated.

3. The method according to claim 2, characterized in that The method further comprises: Acquire first routing configuration information of a switch in the substation to be configured; the first routing configuration information includes next-hop address information of the switch; Determine the next-hop device of the switch according to the next-hop address information of the switch and based on the third association relationship; A first routing configuration information table is generated according to the switch next-hop address information and the switch next-hop device, and the substation equipment information configuration table is updated according to the first routing configuration information table.

4. The method according to claim 1, wherein After generating the substation equipment information configuration table including the third association relationship, the method further includes: Obtaining second routing configuration information of the firewall in the substation to be configured; the second routing configuration information includes the next hop address information of the firewall; Determine the next-hop device of the firewall according to the next-hop address information of the firewall and based on the third association relationship; A second routing configuration information table is generated according to the firewall next-hop address information and the firewall next-hop device, and the substation equipment information configuration table is updated according to the second routing configuration information table.

5. The method according to claim 1, wherein After generating the substation equipment information configuration table including the third association relationship, the method further includes: Obtaining network address translation (NAT) configuration information of a firewall in the substation to be configured; the NAT configuration information includes real-time address information; Determining a real-time device service system according to the real-time address information and based on the third association relationship; A NAT configuration information table is generated according to the real-time device service system and the real-time address information, and the substation device information configuration table is updated according to the NAT configuration information table.

6. The method according to claim 1, characterized in that After generating the substation equipment information configuration table including the third association relationship, the method further includes: Obtaining tunnel configuration information of the encryption device in the substation to be configured; the tunnel configuration information includes an address correspondence between a local tunnel address and a peer tunnel address; the peer tunnel address is an address of a device deployed in the main substation; Determining a second peer device service system corresponding to the tunnel peer address based on the second association relationship; and Determining, based on the third association relationship, a second local device service system corresponding to the local tunnel address; According to the tunnel peer address, the second peer device service system, the tunnel local address and the second local device service system, based on the address correspondence, a tunnel information configuration table is generated, and according to the tunnel information configuration table, the substation equipment information configuration table is updated.

7. A substation equipment information configuration management device, characterized in that: include: The policy configuration data acquisition module is used to obtain the address policy configuration data of the firewall in the substation to be configured; The address strategy configuration data includes device address information and device port information; as well as, An information table acquisition module is configured to acquire an address association information table and a port association information table of a main substation associated with the substation to be configured; the address association information table includes a first association relationship between a device address associated with the main substation and a device service system; the port association information table includes a second association relationship between a device port of the main substation and a device service system; A first business system determining module is configured to determine, if a device address matching the device address information exists in the address association table, a first target business system associated with the matching device address based on the first association relationship; and a second business system determining module configured to determine, if a device port matching the device port information exists in the port association relationship table, a second target business system associated with the matching device port according to the second association relationship; a third association relationship determination module, configured to, if the first target business system and the second target business system are the same device business system, associate the device address information and the device port information with the first target business system or the second target business system to obtain a third association relationship; The information configuration table generating module is used to generate a substation equipment information configuration table including the third association relationship, so as to perform equipment information configuration management on the substation to be configured according to the substation equipment information configuration table.

8. The device according to claim 7, further comprising: An ARP table acquisition module is configured to, after generating the substation equipment information configuration table including the third association relationship, acquire an Address Resolution Protocol (ARP) table of a switch in the substation to be configured; the ARP table includes a port correspondence between a local device port and a peer device port; the peer device port is a device port deployed in the main substation; A first peer device determining module is configured to determine a first peer device service system corresponding to the peer device port according to the second association relationship; and A first local device determining module, configured to determine a first local device service system corresponding to the local device port according to the third association relationship; An interface configuration table generation module is used to generate an interconnection interface information configuration table based on the port correspondence relationship according to the local device port, the first local device business system, the opposite device port and the first opposite device business system, and update the substation equipment information configuration table according to the interconnection interface information configuration table.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the substation equipment information configuration management method according to any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the substation equipment information configuration management method according to any one of claims 1 to 6 when executed.

Images