A method and system for initializing test of an encryption relay protection device
By simulating encrypted login and reading messages, the data fields and internal parameter values of the relay protection device are calibrated, which solves the problem of incomplete initialization test of relay protection devices in the existing technology, realizes comprehensive assessment of communication encryption and login functions, and improves test reliability and correction efficiency.
Patent Information
- Application Number
- CN202310418941.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-04-17
- Publication Date
- 2025-10-17
- Estimated Expiration
- 2043-04-17
AI Technical Summary
The existing technology is difficult to test the correctness of the initialization of the safety functions of the relay protection device, and the test results of the correctness of the initialization of the basic functions are not comprehensive and cannot discover hidden problems.
By simulating encrypted login messages and reading encrypted messages, the data field values and internal parameter values of the relay protection device are read, calibrated to the reference values, the control device is powered off and then powered on again, and the reference values and test values are compared to ensure the correctness of initialization.
It realizes comprehensive assessment of communication encryption and login functions, can more accurately detect the status of relay protection devices, and improve the reliability of test results and correction efficiency.
Smart Images

Figure CN116633833B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The application belongs to the field of relay protection device testing, and particularly relates to a method and system for initializing test of encrypted relay protection device. BACKGROUND
[0002] With the deepening of the informationization process and the development of communication technology, the functions of various devices in intelligent substations are also constantly enriched with the progress of science and technology, and the network security problem following the development of informationization is increasingly prominent. If this problem cannot be well solved, it will hinder the development process of informationization. In view of this situation, the information security of individuals, enterprises and even the state needs to be scientifically and systematically protected. At present, the power industry standard has specified the security function of the relay protection device, and requires that the device should be able to perform identity authentication based on the national encryption algorithm when connecting and using the configuration tool software, and the configuration tool software without authorization is prohibited to access any function of the device. However, in the prior art, only the initialization correctness of the basic function of the device is often tested, and how to simultaneously consider the initialization correctness test of the communication encryption, login and other security functions of the device is a problem that needs to be solved urgently.
[0003] Moreover, in the prior art, the device ICMP communication correctness, export correctness, MMS message sending correctness, GOOSE message sending correctness and other external performance functions of the device are generally used as the basis for testing the initialization correctness of the basic function of the device. By obtaining the reference value and the test value and comparing them, it is determined whether the device is correctly initialized. These judgment bases comprehensively cover the basic functions of the device, but testing the initialization correctness of the basic function of the relay protection device from the external performance of the device cannot find some hidden problems. The loading error of part of the information may not be externally manifested in most cases, but once the small probability situation occurs, it may trigger unpredictable problems. At the same time, testing from the external performance of the device cannot comprehensively cover all external performances of the device. Due to the limited nature of external hardware resources, only part of the export correctness of the device is often tested, resulting in that the test result of the initialization correctness of the basic function of the relay protection device is not comprehensive, and it is difficult to find the problems existing in the initialization of the basic function of the relay protection device in time. SUMMARY
[0004] The application aims to provide a method and system for initializing test of encrypted relay protection device, which is used to solve the problem that the existing test method for the initialization of the basic function of the relay protection device cannot simultaneously consider the test of the initialization correctness of the security function and the test result of the initialization correctness of the basic function is not comprehensive.
[0005] In order to achieve the above object, the application provides a system for initializing test of an encrypted relay protection device, comprising a test module and a control module, the test module is used for simulating issuing of an encrypted login message to the relay protection device when starting the test, if the relay protection device end successfully verifies the encrypted login message, it is determined that the login is successful, otherwise it is determined that the login fails and the test is interrupted; after determining that the login is successful, the encrypted message for reading required information is simulated and issued, and the data field value and / or internal parameter value of the relay protection device are read according to the simulated and issued encrypted message for reading required information, and the calibrated values are taken as reference values after no error is found;
[0006] The control module is used for controlling power-off and re-power-on of the relay protection device after the reference values are determined.
[0007] The test module is further used for simulating and issuing the encrypted login message to the relay protection device again after the device is re-powered on, if the relay protection device end successfully verifies the encrypted login message, it is determined that the login is successful; after the login is successful, the encrypted message for reading required information is simulated and issued again, and the data field value and / or internal parameter value of the relay protection device are read as test values according to the simulated and issued encrypted message for reading required information, and the reference values and the test values are compared; if the comparison result is consistent, it is determined that the initialization of the relay protection device is correct, otherwise it is determined that the test fails and the test is interrupted.
[0008] The above technical solution has the beneficial effects that: through the initialization correctness test of the encrypted internal protocol message, the initialization correctness of the device communication encryption and login function can be tested, and the initialization loading correctness of all internal data tables and internal parameters can be tested; and through the judgment of whether the internal data tables and internal parameters are correctly loaded, whether the state of the relay protection device is normal can be detected, compared with the existing method of detecting whether the state of the relay protection device is normal from the external performance of the device, the correctness of the basic function of the device can be more comprehensively ensured.
[0009] Further, the test module further comprises a man-machine interaction submodule, which is used for displaying the read data field value and / or internal parameter value of the relay protection device to the staff, and is further used for calibrating the data field value and / or internal parameter value of the relay protection device by the staff, so as to take the data field value and / or internal parameter value of the relay protection device as the reference value after no error is found.
[0010] The beneficial effects of the above technical solutions are: the man-machine interaction sub-module is arranged to display the data field value and / or the internal parameter value of the relay protection device to be calibrated to the relevant staff, so that the visualization of the calibration data to be calibrated can be ensured; the relevant staff can calibrate the displayed reference value to be calibrated through the man-machine interaction sub-module, so that the correct test value misjudgment caused by the comparison between the reference value and the test value due to the inaccurate reference value can be avoided, and the missed judgment of the test value with problems caused by the same errors of the reference value and the test value can also be avoided, thereby improving the reliability of the initialization correctness test result.
[0011] Further, the man-machine interaction sub-module is further used to issue a device initialization correctness test failure prompt and display a communication interruption when it is determined that the login fails, and is further used to issue a device initialization correctness test failure prompt and display an error parameter when it is determined that the test fails.
[0012] The beneficial effects of the above technical solutions are: the device initialization correctness test failure prompt is issued and the communication interruption is displayed when it is determined that the login fails, which can indicate that the login process or the encryption process is abnormal, and prompt the relevant staff to correct in time; the device initialization correctness test failure prompt is issued and the error parameter is displayed when it is determined that the test fails, so that the relevant staff can locate the error range through the parameter and improve the correction efficiency.
[0013] Further, the control module is an I / O card control tool, one end of the I / O card control tool is used to be connected in series with a power switch of the relay protection device, and one end of the I / O card control tool is connected with the test module through a serial port.
[0014] The beneficial effects of the above technical solutions are: the simulation of the power-on and power-off initialization can be more consistent with the actual working condition of the normal working state of the relay protection device.
[0015] Further, the test module further includes a message packaging module, a message encryption and packaging module, a message decryption and splitting module, and a message analysis module.
[0016] The message packaging module is used to complete the packaging of the corresponding original login message according to the corresponding message template and login information when simulating the issuance of the encrypted login message, and is used to complete the packaging of the original message for reading the required information according to the corresponding message template and the configured internal data table, data field and internal parameter when simulating the issuance of the encrypted message for reading the required information.
[0017] The message encryption and packaging module is used to perform corresponding encryption and packaging on the original login message and the original message for reading the required information.
[0018] The message decryption and splitting module is used for decrypting the encrypted message replied by the relay protection device to obtain the reply message corresponding to the original login message and the reply message corresponding to the original message required to be read; the message analysis module is used for analyzing the reply message corresponding to the original login message and the reply message corresponding to the original message required to be read obtained after decryption to obtain the corresponding login reply information and the data field value and / or internal parameter value of the relay protection device.
[0019] The above technical solution has the beneficial effects that: through the four modules of the message packaging module, the message encryption and packaging module, the message decryption and splitting module and the message analysis module, the entire test process can be ensured to conform to the actual working condition of the initialization of the relay protection device to be tested using the encrypted internal protocol, thereby improving the reliability of the initialization correctness test.
[0020] Further, the message template, the login information and the configured internal data table, data field and internal parameter are stored in a fixed position in the form of a file in a set format.
[0021] The above technical solution has the beneficial effects that: the corresponding configuration result can be repeatedly used, the repeated configuration time is saved, and the test efficiency is improved.
[0022] The application further provides a method for testing the initialization of an encrypted relay protection device, and the steps are as follows:
[0023] 1) a simulated encrypted login message is issued, if the relay protection device end successfully verifies the encrypted login message, it is determined that the login is successful, otherwise it is determined that the login fails and the test is interrupted;
[0024] 2) after determining that the login is successful, a simulated encrypted message required to be read is issued, and the data field value and / or internal parameter value of the relay protection device is read according to the simulated encrypted message required to be read, and the correct calibration is taken as a reference value;
[0025] 3) after determining the reference value, the relay protection device is powered off and then powered on again;
[0026] 4) after the device is powered on again, the encrypted login message is simulated and issued to the relay protection device again, if the relay protection device end verifies successfully, it is determined that the login is successful; after the login is successful, the encrypted message required to be read is simulated and issued again, and the data field value and / or internal parameter value of the relay protection device is read as a test value according to the simulated encrypted message required to be read, and the reference value and the test value are compared; if the comparison result is consistent, it is determined that the initialization of the relay protection device is correct, otherwise it is determined that the test fails and the test is interrupted.
[0027] The beneficial effects of the above technical solution are that: through the initialization correctness test on the encrypted internal protocol message, the initialization correctness of the device communication encryption and login function can be tested, and the initialization loading correctness of all internal data tables and internal parameters can be tested; and through the judgment of whether the internal data tables and internal parameters are loaded correctly, whether the relay protection device state is normal is detected, compared with the existing method of detecting whether the relay protection device state is normal from the external performance of the slave device, the correctness of the basic function of the device can be more comprehensively ensured.
[0028] Further, the calibration manner is that: the read data field value and / or internal parameter value of the relay protection device is displayed to the worker, the worker calibrates the data field value and / or internal parameter value of the relay protection device, and the data field value and / or internal parameter value of the relay protection device is taken as a reference value after calibration.
[0029] The beneficial effects of the above technical solution are that: the visualization of the to-be-calibrated data can be ensured; and the calibration of the displayed reference value to be calibrated can avoid the situation that the correct test value is misjudged when compared with the test value due to the inaccurate reference value, and can also avoid the situation that the test value with problems is missed due to the same errors of the reference value and the test value, thereby improving the reliability of the initialization correctness test result.
[0030] Further, when it is determined that the login fails, a device initialization correctness test failure prompt is issued, and a communication interruption is displayed; when it is determined that the test fails, a device initialization correctness test failure prompt is issued, and an error parameter is displayed.
[0031] The beneficial effects of the above technical solution are that: when it is determined that the login fails, a device initialization correctness test failure prompt is issued, and a communication interruption is displayed, which can indicate that an abnormality occurs in the login process or the encryption process, and prompt the relevant worker to correct in time; when it is determined that the test fails, a device initialization correctness test failure prompt is issued, and an error parameter is displayed, so that the relevant worker can locate the error range through the parameter, and improve the correction efficiency.
[0032] Further, the generation manner of the encrypted login message is that: an original login message is packaged according to a corresponding message template and login information, and the packaged original login message is encrypted to obtain the encrypted login message.
[0033] The generation manner of the encrypted message of the required information reading is that: an original message of the required information reading is packaged according to a corresponding message template and the configured internal data table, data field and internal parameter, and the packaged original message of the required information reading is encrypted to obtain the encrypted message of the required information reading.
[0034] The technical scheme has the beneficial effects that: the whole test process conforms to the actual working condition of the relay protection device with encrypted internal protocol to be tested, thereby improving the reliability of the initialization correctness test. BRIEF DESCRIPTION OF DRAWINGS
[0035] Figure 1 FIG. 1 is a structural schematic diagram of a relay protection device initialization test system in an embodiment of the system for testing initialization of an encrypted relay protection device according to the present application;
[0036] Figure 2 FIG. 4 is a schematic diagram of a result of comparison between a reference value and a test value displayed by a man-machine interaction submodule after each round of test in the embodiment of the system for testing initialization of an encrypted relay protection device according to the present application;
[0037] Figure 3 FIG. 5 is a schematic diagram of a test result displayed by the man-machine interaction submodule after each round of test in the embodiment of the system for testing initialization of an encrypted relay protection device according to the present application. DETAILED DESCRIPTION
[0038] In order to make the purpose, technical scheme and advantages of the present application more clear and explicit, the present application is further described in detail below in combination with the drawings and embodiments.
[0039] Embodiment of the system for testing initialization of an encrypted relay protection device
[0040] The embodiment provides a technical scheme of a system for testing initialization of an encrypted relay protection device, referring to Figure 1 The system for testing initialization of an encrypted relay protection device comprises a test module and a control module, the test module is used for simulating issuance of an encrypted login message to the relay protection device when starting the initialization correctness test, if the relay protection device end successfully verifies the encrypted login message, it is determined that the login is successful, otherwise it is determined that the login fails and the test is interrupted; after determining that the login is successful, the encrypted message for reading required information is continuously simulated and issued, and the data field value and / or internal parameter value of the relay protection device are read according to the simulated and issued encrypted message for reading required information, and the calibrated values are taken as reference values after no error is found;
[0041] The control module is used for controlling the relay protection device to be powered off and then powered on again after the reference values are determined.
[0042] The test module is also used to simulate the encrypted login message to be sent to the relay protection device again after the device is re-powered, and if the relay protection device end verifies and signs successfully, it is determined that the login is successful; after the login is successful, the encrypted message for reading the required information is simulated to be sent again, and according to the simulated encrypted message for reading the required information, the data field value and / or internal parameter value of the relay protection device are read as test values, and the reference value and the test value are compared; if the comparison result is consistent, it is determined that the relay protection device initialization is correct, otherwise it is determined that the test fails and the test is interrupted.
[0043] It can be seen that the system for testing the initialization of the encrypted relay protection device can test the initialization correctness of the encrypted internal protocol message, and can test the initialization loading correctness of all internal data tables and internal parameters, and can detect whether the relay protection device state is normal through the judgment of whether the internal data table and the internal parameter are correctly loaded, compared with the existing method of detecting whether the relay protection device state is normal from the external performance of the slave device, the correctness of the basic function of the device can be more comprehensively ensured.
[0044] Specifically, the test module includes a message packaging module, a message encryption and encapsulation module, a message decryption and splitting module, and a message analysis module; since the encrypted internal protocol message interaction process is divided into a login stage (simulating sending an encrypted login message and determining login success) and an information reading stage (simulating sending an encrypted message for reading required information and reading data field values and / or internal parameter values of the relay protection device according to the encrypted message), and the information reading stage can only be entered after the login is successful, in the above interaction process, the message packaging module is used to package the corresponding original login message according to the corresponding message template and login information when simulating sending an encrypted login message in the login stage, and the message template is designed according to the corresponding message format; and is also used to package the original message for reading the required information according to the corresponding message template and the configured internal data table, data field and internal parameter when simulating sending an encrypted message for reading the required information in the information reading stage, and the message template is also designed according to the corresponding message format. Through the four simulated message generation and analysis modules, the entire test process can meet the actual working conditions of the relay protection device to be tested using encrypted internal protocols, thereby improving the reliability of the initialization correctness test.
[0045] The encryption process of the encrypted message is different according to different message types, that is, different interactive process stages, and the message encryption and encapsulation module is used for corresponding encryption and encapsulation of the original login message and the message for reading the required information; the message decryption and splitting module is used for decrypting the encrypted message replied by the relay protection device to obtain the reply message corresponding to the original login message and the reply message corresponding to the message for reading the required information; and the message analysis module is used for analyzing the reply message corresponding to the original login message and the reply message corresponding to the message for reading the required information obtained after decryption to obtain the corresponding login reply information and the data field value and / or internal parameter value of the relay protection device, that is, the decryption process after the tool receives the encrypted message is opposite to the encryption process, and the decrypted message is finally analyzed by the message analysis module to obtain the required information, and then enters the next logical judgment.
[0046] In the embodiment, as shown in Figure 1 , the test module is carried by the PC in Figure 1 , the test module is connected with the front debugging port of the relay protection device to be tested through a network port to transmit encrypted internal protocol messages (such as encrypted login messages and encrypted messages for reading required information); the control module is an I / O card control tool, which makes the simulation of power-on and power-off initialization more consistent with the actual working condition of the relay protection device in the normal working state; one end of the I / O card control tool is connected in series with the power switch of the relay protection device to be tested, and the other end is connected with the test module through a serial port; before the test starts, the test module can configure the outlet position of the I / O card control tool, the closing and opening time, the automatic test times, and also configure the internal data table and data field to be tested; the internal data table and data field to be tested must be strictly configured according to the internal document, and since the internal data table and data field of the relay protection device are relatively fixed, the test case after the configuration can be used according to the configuration corresponding to the internal data table and data field of the relay protection device; the test module also configures the internal parameters to be tested, and the configuration should be consistent with the internal parameters displayed by the debugging analyzer of the relay protection device; all the above configurations (including but not limited to the message template, login information, and the configured internal data table, data field and internal parameter) can be stored in a fixed position in the form of a document, which supports repeated use; when the above configurations are completed, the internal protocol message communication is started, and when the test module prompts that the communication is established, the initialization correctness test can be performed. The debugging analyzer is not part of the test system, but a debugging tool of the relay protection device, through which the related information of different internal parameters of the relay protection device can be viewed, and these information is used for configuring the internal parameters.
[0047] In the embodiment, the test module further comprises a human-computer interaction submodule, configured to display the read data field values and / or internal parameter values of the relay protection device to a worker, and further configured to calibrate the read data field values and / or internal parameter values of the relay protection device by the worker, so that the calibrated data field values and / or internal parameter values of the relay protection device can be used as the reference values after the calibration is correct. In other words, the data field values and / or internal parameter values of the relay protection device to be calibrated are displayed to the relevant worker through the human-computer interaction submodule each time the reference values are obtained by testing (the data field values and / or internal parameter values of the relay protection device read for the first time in each test are calibrated), and the relevant worker can calibrate the displayed data field values and / or internal parameter values of the relay protection device to be calibrated through the human-computer interaction submodule. After the calibration is completed, the calibrated data field values and / or internal parameter values of the relay protection device can be used as the reference values. In this way, the situation that the correct test value is misjudged due to the inaccurate reference values when compared with the test values can be avoided, and the situation that the test value with the same error as the reference value is missed can also be avoided, thereby improving the reliability of the initialization correctness test result.
[0048] The human-computer interaction submodule is further configured to issue a device initialization correctness test failure prompt and display a communication interruption when it is determined that the login fails, and further configured to issue a device initialization correctness test failure prompt and display an error parameter when it is determined that the test fails. Specifically, after each round of test, if the login process (i.e., the login stage) has a problem, the automatic test process will be stopped and initialization correctness test failure will be displayed. When the login process is normal, the test parameter test (i.e., the information reading stage) will be continued, and after the test is completed (i.e., the reference values and the test values are compared), the test result will be displayed in detail, and it is prompted whether each test parameter passes the test, as shown in Figure 2 If the test parameter does not pass the test, the automatic test process will be stopped and initialization correctness test failure will be displayed. When the login process is normal and the test parameter passes the test, the automatic test process will continue the next round of test and display the current round of initialization correctness test success, as shown in Figure 3 Since the login and information reading processes are encrypted processes, if the login process has a problem and the automatic test process is stopped and initialization correctness test failure is displayed, it may be that the login is incorrect or the communication encryption is incorrect as long as the detailed test result is not displayed.
[0049] In summary, the above-mentioned system for testing the initialization of the encrypted relay protection device first builds a system environment as shown in Figure 1 After the test is started, the specific test process is as follows:
[0050] The test module first simulates sending an encrypted login message according to the set login information, and can continue to communicate with the device only after successful verification, otherwise the test is interrupted, the test module reports that the device initialization correctness test fails, and the communication interruption is displayed through the man-machine interaction submodule, indicating that the login process or the encryption process is abnormal and needs to be corrected; after successful login, the encrypted message for reading the required information is simulated to read the data field value and internal parameter value of the device as a reference value, and then the I / O card controls the tooling to control the device to power off and power on, after the device is powered on, the test tool re-encrypts the internal communication with the device, and again simulates sending an encrypted login message according to the set login information, and reads the data field value and internal parameter value of the device as a test value after successful login, and the test module compares the reference value and the test value, and the test continues only after the results are consistent, otherwise the test is interrupted, the test module reports that the device initialization correctness test fails, and the error parameter is displayed through the man-machine interaction submodule, so that the developer can locate the error range through the parameter to correct it.
[0051] Method embodiment of the initialization test of the encrypted relay protection device
[0052] The embodiment provides a method for testing the initialization of an encrypted relay protection device, and the specific steps are as follows:
[0053] 1) Simulate sending an encrypted login message, if the relay protection device end verifies the encrypted login message successfully, it is determined that the login is successful, otherwise it is determined that the login fails and the test is interrupted;
[0054] 2) After determining that the login is successful, continue to simulate sending an encrypted message for reading the required information, and read the data field value and / or internal parameter value of the relay protection device according to the simulated encrypted message for reading the required information, and calibrate the reference value without error;
[0055] 3) After determining the reference value, control the relay protection device to power off and then power on again;
[0056] 4) After the device is powered on again, simulate sending an encrypted login message to the relay protection device again, if the relay protection device end verifies the encrypted login message successfully, it is determined that the login is successful; after successful login, simulate sending an encrypted message for reading the required information again, and read the data field value and / or internal parameter value of the relay protection device as a test value according to the simulated encrypted message for reading the required information, and compare the reference value and the test value; if the comparison result is consistent, it is determined that the relay protection device initialization is correct, otherwise it is determined that the test fails and the test is interrupted.
[0057] The calibration manner after reading the data field value and / or internal parameter value of the relay protection device is specifically as follows: the read data field value and / or internal parameter value of the relay protection device is shown to the worker, the read data field value and / or internal parameter value of the relay protection device is calibrated by the worker, and after the calibration is correct, the data field value and / or internal parameter value of the relay protection device is taken as a reference value.
[0058] And when determining that the login fails, a device initialization correctness test failure prompt is issued, and a communication interruption is displayed, indicating that an abnormality occurs in the login process or the encryption process and needs to be corrected; when determining that the test fails, a device initialization correctness test failure prompt is issued, and an error parameter is displayed, so that the related worker can locate the error range through the parameter to correct.
[0059] In the embodiment, the generation manner of the encrypted login message is as follows: an original login message is packaged according to a corresponding message template and set login information, and the packaged original login message is encrypted to obtain an encrypted login message.
[0060] The generation manner of the encrypted message for reading required information is as follows: an original message for reading required information is packaged according to a corresponding message template and configured internal data table, data field and internal parameter, and the packaged original message for reading required information is encrypted to obtain an encrypted message for reading required information.
[0061] The specific test flow of the encryption relay protection device initialization test method has been described in detail in the system embodiment of the encryption relay protection device initialization test, and will not be repeated here.
[0062] The present application has the following characteristics:
[0063] 1) By performing initialization correctness test on the encrypted internal protocol message, the initialization correctness of the device communication encryption and login function can be tested, and the initialization loading correctness of all internal data tables and internal parameters can also be tested; and whether the internal data table and internal parameter are correctly loaded is judged to detect whether the relay protection device is in a normal state, compared with the existing method of detecting whether the relay protection device is in a normal state from the external performance of the device, the correctness of the basic function of the device can be more comprehensively ensured.
[0064] 2) By the four modules of the message packaging module, the message encryption and encapsulation module, the message decryption and splitting module and the message analysis module, the actual working condition of the relay protection device to be tested that uses the encrypted internal protocol during initialization can be ensured, so that the reliability of the initialization correctness test is improved.
[0065] 3) The man-machine interaction sub-module is arranged to display the data field value and / or internal parameter value of the relay protection device to be calibrated to the relevant staff, and the relevant staff can calibrate the displayed data field value and / or internal parameter value of the relay protection device to be calibrated through the man-machine interaction sub-module, and the calibrated value can be used as the reference value, so that the situation that the correct test value is misjudged due to the inaccurate reference value when compared with the test value can be avoided, and the situation that the test value with the same error as the reference value is missed can also be avoided, thereby improving the reliability of the initialization correctness test result;
[0066] The man-machine interaction sub-module can also issue a device initialization correctness test failure prompt when determining that the login fails, and display a communication interruption to indicate that the login process or the encryption process is abnormal and needs to be corrected; the device initialization correctness test failure prompt is issued when determining that the test fails, and an error parameter is displayed, so that the relevant staff can locate the error range through the parameter to correct and improve the correction efficiency.
[0067] It should be understood that the above specific embodiments of the present application are only used for illustrative or explanatory purposes of the principles of the present application, and do not constitute a limitation on the present application.
Claims
1. A system for initializing and testing an encrypted relay protection device, characterized in that: The system comprises a test module and a control module. The test module is used to simulate sending an encrypted login message to the relay protection device at the start of the test. If the relay protection device successfully verifies the signature of the encrypted login message, the login is determined to be successful. Otherwise, the login is determined to be failed and the test is interrupted. After the login is determined to be successful, the system continues to simulate sending an encrypted message for reading the required information, and reads the data field value and / or internal parameter value of the relay protection device based on the encrypted message for reading the required information, and uses the value as the reference value after calibration. The control module is used to control the relay protection device to power off and then power on again after determining the reference value; The test module is further configured to simulate sending an encrypted login message to the relay protection device again after the device is powered on again. If the relay protection device successfully verifies the signature, the login is determined to be successful. After the login is successful, the test module simulates sending an encrypted message for reading the required information again, and reads the data field value and / or internal parameter value of the relay protection device as a test value based on the encrypted message for reading the required information, and compares the benchmark value with the test value. If the comparison results are consistent, it is determined that the relay protection device is initialized correctly, otherwise it is determined that the test has failed and the test is interrupted.
2. The system for initializing and testing an encrypted relay protection device according to claim 1, characterized in that: The test module also includes a human-computer interaction submodule, which is used to display the read data field values and / or internal parameter values of the relay protection device to the staff, and is also used to enable the staff to calibrate the data field values and / or internal parameter values of the relay protection device, so that the data field values and / or internal parameter values of the relay protection device can be used as reference values after calibration.
3. The system for initializing and testing an encrypted relay protection device according to claim 2, characterized in that: The human-computer interaction submodule is further configured to issue a device initialization correctness test failure prompt when the login is determined to have failed, and display a communication interruption; and is further configured to issue a device initialization correctness test failure prompt when the test is determined to have failed, and display an error parameter.
4. The system for initializing and testing an encrypted relay protection device according to any one of claims 1 to 3, characterized in that: The control module is an I / O card control fixture, one end of which is used to be connected in series with the power switch of the relay protection device, and the other end is connected to the test module through a serial port.
5. The system for initializing and testing an encrypted relay protection device according to any one of claims 1 to 3, characterized in that: The test module also includes a message packaging module, a message encryption and encapsulation module, a message decryption and splitting module and a message parsing module; The message packaging module is used to complete the packaging of the corresponding original login message according to the corresponding message template and login information when simulating the sending of an encrypted login message, and is also used to complete the packaging of the message of the original information required for reading according to the corresponding message template and the configured internal data table, data field and internal parameters when simulating the sending of an encrypted message for reading required information; The message encryption and encapsulation module is used to encrypt and encapsulate the original login message and the original message for reading the required information accordingly; The message decryption and splitting module is used to decrypt the encrypted message replied by the relay protection device to obtain the reply message corresponding to the original login message and the reply message corresponding to the original message for reading the required information; the message parsing module is used to parse the reply message corresponding to the original login message obtained after decryption and the reply message corresponding to the original message for reading the required information to obtain the corresponding login reply information and the data field value and / or internal parameter value of the relay protection device.
6. The system for initializing and testing an encrypted relay protection device according to claim 5, characterized in that: The message template, login information, and configured internal data tables, data fields, and internal parameters are stored in a fixed location in the form of files in a set format.
7. A method for initializing a test of an encrypted relay protection device, characterized in that: Here are the steps: 1) Simulate the sending of an encrypted login message. If the relay protection device successfully verifies the signature of the encrypted login message, the login is considered successful. Otherwise, the login is considered failed and the test is terminated. 2) After determining that the login is successful, continue to simulate sending an encrypted message for reading the required information, and read the data field value and / or internal parameter value of the relay protection device based on the encrypted message for reading the required information sent by the simulation, and use it as a reference value after calibration; 3) After determining the reference value, controlling the relay protection device to power off and then power on again; 4) After the device is powered on again, it simulates sending an encrypted login message to the relay protection device again. If the relay protection device successfully verifies the signature, the login is considered successful. After the login is successful, the encrypted message for reading the required information is simulated and sent again, and the data field value and / or internal parameter value of the relay protection device are read as the test value according to the encrypted message for reading the required information simulated and sent, and the benchmark value is compared with the test value; If the comparison results are consistent, it is determined that the relay protection device is initialized correctly, otherwise it is determined that the test has failed and the test is interrupted.
8. The method for initializing and testing an encrypted relay protection device according to claim 7, wherein: The calibration method is: the read data field value and / or internal parameter value of the relay protection device is displayed to the staff, and the staff calibrates the data field value and / or internal parameter value of the relay protection device, so that the data field value and / or internal parameter value of the relay protection device is used as the reference value after the calibration is correct.
9. The method for initializing and testing an encrypted relay protection device according to claim 7 or 8, wherein: When it is determined that the login fails, a prompt of device initialization correctness test failure is issued, and communication interruption is displayed; when it is determined that the test fails, a prompt of device initialization correctness test failure is issued, and error parameters are displayed.
10. The method for initializing a test of an encrypted relay protection device according to claim 7 or 8, characterized in that: The encrypted login message is generated by packaging the original login message according to the corresponding message template and login information, and encrypting the packaged original login message to obtain the encrypted login message; The encrypted message for reading the required information is generated by packaging the original message for reading the required information according to the corresponding message template and the configured internal data table, data field and internal parameters, encrypting the packaged original message for reading the required information, and obtaining the encrypted message for reading the required information.
Citation Information
Patent Citations
VPN (Virtual Private Network) equipment state secret test method and device, electronic equipment and storage medium
CN115766553A
On-line and off-line integrated analysis and testing method for smart substation
WO2014090025A1