A method and system for safety integration between power plant safety zone 1 and distributed control system

Abstract

The present invention discloses a method and system for safely integrating a power plant safety zone I with a distributed control system, and relates to the field of power plant data control technology, including establishing a physically isolated safe channel in the power plant safety zone I, establishing a security protocol on the safe channel; deploying a distributed intelligent monitoring system ICS, building deployment communications between the DCS system and the ICS system; establishing a real-time data monitoring mechanism through the ICS system, and performing real-time monitoring and analysis of equipment operation data. The method for safely integrating a power plant safety zone I with a distributed control system provided by the present invention ensures the confidentiality, integrity, reliability, availability and real-time performance of data after system integration through multiple security measures such as physical isolation, data encryption, identity authentication, access control, real-time monitoring and data backup.

Description

Technical Field

[0001] The present invention relates to the technical field of power plant data control, and in particular to a method and system for safely integrating a power plant safety zone 1 with a distributed control system. Background Art

[0002] With the continuous improvement of the industrial automation level of power enterprises, in the existing power production information construction system, the distributed control system DCS realizes the automatic collection and control of data in the industrial production process, and performs various tasks through traditional human-computer interaction, such as adjusting set values, confirming alarms, starting manual control, etc., ultimately achieving real-time monitoring and adjustment of the production process.

[0003] In principle, the network technology business system of power enterprises is divided into production control area and management information area. The production control area can be divided into control area (safety area I) and non-control area (safety area II). The traditional distributed control system DCS (safety area I) cannot intelligently monitor abnormal equipment operation status and equipment failure in real time, provide intelligent alarms, statistical analysis, parameter fluctuation analysis, etc. It is very necessary to integrate the intelligent monitoring system ICS to improve production efficiency and reduce operation and maintenance costs. The integration of the intelligent monitoring system puts forward higher requirements for the data security and information security of the power plant safety area I.

[0004] Safety Zone I is mainly responsible for real-time monitoring and control of the production process, while Safety Zone II is responsible for non-real-time management information processing. The traditional DCS system (located in Safety Zone I) has limitations in data security and information security, and is difficult to apply to small-scale process control. The distributed structure leads to communication overhead and is difficult to meet the needs of modern power companies for intelligence and integration. Therefore, it is very necessary to improve production efficiency and reduce operation and maintenance costs by integrating the intelligent monitoring system (ICS). The ICS system can monitor and intelligently analyze the operating status of the equipment in real time, identify and handle potential security threats in a timely manner, and thus improve the operating safety and stability of the power plant. However, the integration of the ICS system also puts higher requirements on the data security and information security of the safety zone I of the power plant. The existing integration method cannot meet the use requirements in terms of data integrity and security, and further optimization and improvement are needed in the system architecture and security protection measures. Summary of the invention

[0005] In view of the above-mentioned problems, the present invention is proposed.

[0006] Therefore, the technical problems solved by the present invention are: the existing DCS system has high cost, high communication cost, conventional integration is difficult to ensure data integrity and security, and how to integrate the intelligent monitoring system to improve production efficiency and reduce operation and maintenance costs.

[0007] To solve the above technical problems, the present invention provides the following technical solutions: a method for safely integrating a power plant safety zone I with a distributed control system, comprising establishing a physically isolated safety channel in the power plant safety zone I, and establishing a safety protocol on the safety channel; deploying a distributed intelligent monitoring system ICS, and building deployment communication between the DCS system and the ICS system; establishing a real-time data monitoring mechanism through the ICS system to monitor and analyze equipment operation data in real time.

[0008] As a preferred solution of the method for secure integration of a power plant safety zone I with a distributed control system described in the present invention, wherein: the establishment of a physically isolated secure channel in the power plant safety zone I includes establishing a physically isolated secure channel in the power plant safety zone I, using a network security firewall, and performing real-time encryption and decryption of communication data.

[0009] As a preferred solution of the method for secure integration of a power plant safety zone 1 with a distributed control system described in the present invention, wherein: the establishing of a security protocol on a secure channel includes establishing a security protocol on a secure channel, performing identity authentication and access control on communication data to prevent unauthorized access and operation, the security protocol adopts an AES-CTR encryption algorithm and a dynamic key exchange technology, firstly performing an identity authentication process based on a user password through the AES-CTR encryption algorithm, after the identity authentication is passed, generating a pair of keys including a public key and a private key, the generated public key is used to encrypt messages, before sending the message, the sender uses the private key to digitally sign the message, after receiving the encrypted message, the receiver uses the public key to verify the signature to prove that the data transmission has been authorized and there is no illegal operation.

[0010] As a preferred solution of the method for safety integration of the power plant safety zone 1 and the distributed control system described in the present invention, wherein: the establishment of a safety protocol on the safety channel also includes building network isolation between different units in the safety zone 1, building a DCS network domain, an ICS network domain, and an equipment unit network domain, setting up unidirectional network domain isolation or soft unidirectional isolation for different unit equipment, building an ICS system for each unit and the public system separately, and then sending data of different units to the ICS platform on the public system side respectively, to prevent interaction and intercommunication operations between units;

[0011] Set the unit safety information level, which is divided into high safety level and other safety levels;

[0012] Set the unit data type, divided into key control operations and data analysis;

[0013] Set up a one-way network domain for units with high security levels or critical control operations. Select soft one-way isolation when the device is at other security levels and the data type is data analysis.

[0014] As a preferred solution of the method for safety integration of power plant safety zone 1 and distributed control system described in the present invention, wherein: the establishment of a real-time data monitoring mechanism through the ICS system includes deploying a distributed intelligent monitoring system ICS inside the power plant safety zone 1, performing real-time data collection, intelligent analysis, centralized unit management and monitoring of each safety unit equipment, identifying potential threats by real-time monitoring of the operating status and communication data of the safety equipment, and achieving real-time data access through the ICS data center based on the real-time data and historical data of the power plant ICS, combining the operating data of different periods of the equipment as the data source for big data analysis and mining, and setting the dynamic alarm threshold of the operating parameters for the normal operating parameter range of the unit under different load conditions. The potential threat analysis includes early warning in the real-time data collection stage, early warning in intelligent analysis, and early warning in centralized unit management;

[0015] Early warnings during the real-time data collection phase include real-time access to the operating data of each unit through the ICS data center, monitoring access delays, and recording data access delay alarms if data access delays exceed 1 second. If the data missing rate exceeds 0.1%, a data integrity alarm is recorded. If both the data access delay and the data missing rate exceed the threshold at the same time within a single data collection cycle, it is considered that there is a network or equipment failure, triggering an emergency alarm and notifying maintenance personnel.

[0016] Intelligent analysis and early warning include identification of senders and receivers during data transmission. When abnormal communication data is detected from the same sender continuously, the sender is identified as a potential threat and the information generated by the public key and private key is sent to the operation and maintenance personnel. When abnormal communication data is detected from the same receiver continuously, the receiving unit is identified, and a centralized management early warning is issued for the unit, and an attack alarm is sent to the operation and maintenance personnel.

[0017] The unit centralized management warning includes individual control of the unit based on the dynamic alarm threshold of the set operating parameters, setting 100 data transmissions as one round of data transmission for a unit, and triggering the centralized management of the unit when data continuously exceeds the threshold range, and uniformly comparing the data of the same type of units. When only one unit has data abnormalities or more than one unit has data abnormalities but the continuous abnormalities are in different intervals, the original isolation method is maintained. When more than one unit has data abnormalities in the same interval, the original isolation method is switched to one-way domain isolation. If the original isolation method is one-way domain isolation, an isolation alarm is issued.

[0018] As a preferred solution of the method for safety integration of the first safety zone of a power plant with a distributed control system described in the present invention, the real-time monitoring and analysis of equipment operation data includes establishing an independent CD network between the DCS system and the ICS system, and only performing ABCD four-network intercommunication at the interface switch.

[0019] As a preferred solution of the method for safety integration of power plant safety zone 1 and distributed control system described in the present invention, the real-time monitoring and analysis of equipment operation data includes setting a data backup and recovery mechanism in the DCS system and the ICS system, and performing incremental backup of the real-time data of the connected units by setting system timer tasks and combining the current utilization rate of server resources. The incremental backup is expressed as:

[0020] ,

[0021] in, is the weight coefficient, Indicates the amount of data change, Indicates at time CPU usage, Indicates the maximum CPU usage. Indicates at time Memory usage, Indicates the maximum memory usage, represents the attenuation coefficient, Indicates at time Data integrity rate. When the system detects a negative value for incremental backup, it indicates that resource utilization is too high and backup is limited.

[0022] Set regular work reminders to automatically remind operators to perform regular data backups based on the system's built-in Diracdelta function and server resource utilization, expressed as:

[0023] ,

[0024] in, Indicates the importance of backup. represents the Dirac delta function, Indicates the reminder time point. represents the adjustment coefficient, Indicates at time Server resource utilization, Indicates the total number of backups in a cycle;

[0025] Establish a system fault-tolerant mechanism, and identify abnormal CPU time consumption and memory usage by building an error code system, a system abnormal operation system, a data set abnormality monitoring system, and a resource operation monitoring system.

[0026] Another object of the present invention is to provide a safety integration system between the power plant safety zone 1 and the distributed control system, which can significantly improve the production efficiency and management efficiency of the power plant through the safety integrated intelligent monitoring system, and can also timely discover and deal with potential security threats and abnormal behaviors, reducing the operation risk of the power plant. It solves the problem that the current DCS integration technology contains data integrity and security that cannot meet the use requirements.

[0027] As a preferred solution of the safety integration system of the power plant safety zone I and the distributed control system described in the present invention, it includes: a safety protocol module, a communication system construction module, and a monitoring and control module; the safety protocol module is used to establish a physically isolated safety channel in the power plant safety zone I, and establish a safety protocol on the safety channel; the communication system construction module is used to deploy a distributed intelligent monitoring system ICS, and establish deployment communication between the DCS system and the ICS system; the monitoring and control module is used to establish a real-time data monitoring mechanism through the ICS system, and perform real-time monitoring and analysis of equipment operation data.

[0028] A computer device comprises a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of a method for safety integration of a power plant safety zone 1 with a distributed control system.

[0029] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a method for safety integration of a power plant safety zone 1 with a distributed control system.

[0030] Beneficial effects of the present invention: The method for secure integration of the power plant safety zone 1 with the distributed control system provided by the present invention ensures the confidentiality, integrity, reliability, availability and real-time performance of the data after system integration through multiple security measures such as physical isolation, data encryption, identity authentication, access control, real-time monitoring and data backup. Through the securely integrated intelligent monitoring system, the production efficiency and management efficiency of the power plant can be significantly improved, and potential security threats and abnormal behaviors can be discovered and handled in a timely manner, reducing the operating risks of the power plant. The present invention achieves better results in terms of data transmission efficiency, data integrity and data confidentiality. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0032] Figure 1An overall flow chart of a method for safety integration between a power plant safety zone 1 and a distributed control system provided in the first embodiment of the present invention.

[0033] Figure 2 A DCS and ICS communication network topology diagram of a method for safely integrating a power plant safety zone with a distributed control system is provided as a first embodiment of the present invention.

[0034] Figure 3 A schematic diagram of a module of a safety integration system between a power plant safety zone 1 and a distributed control system provided in a third embodiment of the present invention. DETAILED DESCRIPTION

[0035] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0036] Example 1

[0037] Reference Figure 1-Figure 2 , as an embodiment of the present invention, provides a method for safety integration of a power plant safety zone 1 with a distributed control system, comprising:

[0038] S1: Establish a physically isolated safety channel in the power plant safety area I and establish a safety protocol on the safety channel.

[0039] Furthermore, the information system of the power enterprise is divided into the production control area and the management information area according to the security level principle. The production control area can be divided into the control area (safety area I) and the non-control area (safety area II). Under normal circumstances, the production management information system will be integrated and deployed in the management information area.

[0040] It should be noted that the establishment of a physically isolated safety channel in the power plant safety zone I includes establishing a physically isolated safety channel in the power plant safety zone I, adopting a network security firewall, and performing real-time encryption and decryption of communication data.

[0041] It should also be noted that establishing a security protocol on a secure channel includes establishing a security protocol on a secure channel, authenticating and controlling access to communication data to prevent unauthorized access and operation. The security protocol adopts the AES-CTR encryption algorithm and dynamic key exchange technology. The identity authentication process is first performed based on the user password through the AES-CTR encryption algorithm. After the identity authentication is passed, a pair of keys including a public key and a private key are generated. The generated public key is used to encrypt messages. Before sending the message, the sender uses the private key to digitally sign the message. After receiving the encrypted message, the recipient uses the public key to verify the signature to prove that the data transmission has been authorized and there is no illegal operation.

[0042] S2: Deploy the distributed intelligent monitoring system ICS and build deployment communication between the DCS system and the ICS system.

[0043] Furthermore, network domain isolation is required for different units in safety zone 1 (such as unit 1 and unit 2). It is strictly prohibited to operate the equipment of unit 2 through any device in the network domain of unit 1. It is necessary to ensure that the messages sent by the ICS system to the DCS system are concise and reliable, and the overall regional communication load cannot increase abnormally or even cause equipment failure due to ICS problems.

[0044] It should be noted that the establishment of a security protocol on the security channel also includes building network isolation between different units in the first security zone, building a DCS network domain, an ICS network domain, and an equipment unit network domain, setting up one-way network domain isolation or soft one-way isolation for different unit equipment, building an ICS system for each unit and the public system separately, and then sending data from different units to the ICS platform on the public system side, respectively, to prevent interaction and intercommunication between units, thereby avoiding abnormal increase in DCS and ICS communication loads and even equipment failures;

[0045] Set the unit safety information level, which is divided into high safety level and other safety levels;

[0046] Set the unit data type, divided into key control operations and data analysis;

[0047] Set up a one-way network domain for units with high security levels or critical control operations. Select soft one-way isolation when the device is at other security levels and the data type is data analysis.

[0048] It should also be noted that the establishment of a real-time data monitoring mechanism through the ICS system includes deploying a distributed intelligent monitoring system ICS within the first safety zone of the power plant to collect data in real time, conduct intelligent analysis, and centrally manage and monitor the equipment of each safety unit. Potential threats are identified by real-time monitoring of the operating status and communication data of the safety equipment. Based on the real-time and historical data of the power plant ICS, real-time data access is achieved through the ICS data center. The operating data of the equipment in different cycles is used as the data source for big data analysis and mining. According to the normal operating parameter range of the unit under different load conditions, the dynamic alarm threshold of the operating parameter is set. The potential threat analysis includes early warning at the real-time data collection stage, early warning of intelligent analysis, and early warning of centralized management of the unit.

[0049] Early warnings during the real-time data collection phase include real-time access to the operating data of each unit through the ICS data center, monitoring access delays, and recording data access delay alarms if data access delays exceed 1 second. If the data missing rate exceeds 0.1%, a data integrity alarm is recorded. If both the data access delay and the data missing rate exceed the threshold at the same time within a single data collection cycle, it is considered that there is a network or equipment failure, triggering an emergency alarm and notifying maintenance personnel.

[0050] Intelligent analysis and early warning include identification of senders and receivers during data transmission. When abnormal communication data is detected from the same sender continuously, the sender is identified as a potential threat and the information generated by the public key and private key is sent to the operation and maintenance personnel. When abnormal communication data is detected from the same receiver continuously, the receiving unit is identified, and a centralized management early warning is issued for the unit, and an attack alarm is sent to the operation and maintenance personnel.

[0051] The unit centralized management warning includes individual control of the unit based on the dynamic alarm threshold of the set operating parameters, setting 100 data transmissions as one round of data transmission for a unit, and triggering the centralized management of the unit when data continuously exceeds the threshold range, and uniformly comparing the data of the same type of units. When only one unit has data abnormalities or more than one unit has data abnormalities but the continuous abnormalities are in different intervals, the original isolation method is maintained. When more than one unit has data abnormalities in the same interval, the original isolation method is switched to one-way domain isolation. If the original isolation method is one-way domain isolation, an isolation alarm is issued.

[0052] S3: Establish a real-time data monitoring mechanism through the ICS system to monitor and analyze equipment operation data in real time.

[0053] Furthermore, the real-time monitoring and analysis of equipment operation data includes establishing an independent CD network between the DCS system and the ICS system, and only communicating between the four networks ABCD at the interface switch. This ensures that communication isolation is effective, does not affect the original DCS system network load, and ensures that the communication between the four network segments is independent and efficient. Through the independent CD network, two-way secure data communication between the DCS and ICS systems is achieved, such as Figure 2 The steps shown include:

[0054] Network extension design, deploying an independent CD network segment, which is dedicated to data communication between DCS and ICS systems; building an independent ICS system for each unit and a public ICS system to support the operation of the CD network segment; building an independent ICS interface switch server for each unit to support independent communication between DCS and ICS;

[0055] Key equipment configuration, unit server: each unit server is assigned a unique IP address to handle data exchange between DCS and ICS, interface switch, each interface switch server is responsible for one-way communication with the corresponding DCS and ICS; firewalls and one-way network gates are deployed on the public system network nodes to be responsible for one-way communication between ICS servers and the public system to prevent communication between different units;

[0056] Interface switches and interconnection design, set up special interface switches at the interface where CD network segment and ABCD four networks are interconnected. These interface machines are responsible for processing data requests from different network segments and forwarding data between CD network segment and AB network segment; using one-way network gate technology, realize one-way data communication between CD network segment unit server and public ICS system.

[0057] It should be noted that the real-time monitoring and analysis of equipment operation data includes setting up a data backup and recovery mechanism in the DCS system and the ICS system, and performing incremental backup of the real-time data of the connected units by setting system scheduled tasks and combining the current utilization rate of server resources. The incremental backup is expressed as:

[0058] ,

[0059] in, is the weight coefficient, Indicates the amount of data change, Indicates at time CPU usage, Indicates the maximum CPU usage. Indicates at time Memory usage, Indicates the maximum memory usage, represents the attenuation coefficient, Indicates at time Data integrity rate. When the system detects a negative value for incremental backup, it indicates that resource utilization is too high and backup is limited.

[0060] Set regular work reminders to automatically remind operators to perform regular data backups based on the system's built-in Diracdelta function and server resource utilization, expressed as:

[0061] ,

[0062] in, Indicates the importance of backup. represents the Dirac delta function, Indicates the reminder time point. represents the adjustment coefficient, Indicates at time Server resource utilization, Indicates the total number of backups in a cycle;

[0063] Establish a system fault-tolerant mechanism, and identify abnormal CPU time consumption and memory usage by building an error code system, a system abnormal operation system, a data set abnormality monitoring system, and a resource operation monitoring system.

[0064] Example 2, an embodiment of the present invention, provides a method for safety integration of a power plant safety zone 1 with a distributed control system. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through economic benefit calculation and simulation experiments.

[0065] First, the test was conducted in a medium-sized thermal power plant with four main units. Each unit was equipped with a DCS system and tested twice: first, a separate DCS system test, and second, a test after integrating the ICS system.

[0066] Install network monitoring equipment to collect data during the test, including data access delay, data loss rate, CPU usage, memory usage, and alarm times.

[0067] Data collection access delay: records the time from sending to receiving for each unit during the data transmission process.

[0068] Collection data loss rate: records the proportion of data packets lost during data transmission for each unit.

[0069] Monitor CPU usage: Record the CPU usage of each unit during the test.

[0070] Monitor memory usage: record the memory usage of each unit during the test.

[0071] Record the number of alarms: Count the number of alarms triggered by each unit during the test.

[0072] Table 1 Experimental data comparison table

[0073] ,

[0074] Under the existing technology, the data access delay in each unit exceeds 1 second, and the highest is 1.4 seconds. After the implementation of the present invention, the data access delay is significantly reduced, all below 0.9 seconds, and the highest is only 0.9 seconds. Under the existing technology, the data loss rate exceeds 0.1%, and the highest is 0.20%. After the implementation of the present invention, the data loss rate is significantly reduced, all below 0.06%, and the highest is only 0.06%. By establishing a physically isolated secure channel and security protocol, the real-time and integrity of data access are improved.

[0075] Under the existing technology, the CPU usage of each unit is above 70%, with the highest being 76%. After the implementation of the present invention, the CPU usage is significantly reduced, all below 68%, with the highest being 68%. This result shows that the present invention effectively reduces the CPU load of the system and improves the operating efficiency of the system. This is because by deploying the distributed intelligent monitoring system ICS, real-time monitoring and intelligent analysis of equipment operation data are achieved, effectively reducing the CPU and memory load of the system.

[0076] Under the existing technology, the memory usage of each unit is above 60%, with the highest being 63%. After the implementation of the present invention, the memory usage is significantly reduced, all below 58%, with the highest being 58%. This result shows that the present invention effectively reduces the memory load of the system and improves the stability of the system.

[0077] Under the existing technology, the alarm times of each unit are high, all more than 5 times, and the highest is 7 times. After the implementation of the present invention, the alarm times are significantly reduced, all less than 3 times, and the highest is only 3 times. This result shows that by setting up a data backup and recovery mechanism, it is ensured that the system can quickly restore data in unexpected situations and the overall data reliability of the service is improved.

[0078] Example 3

[0079] Reference Figure 3 , as an embodiment of the present invention, provides a safety integration system between a power plant safety zone 1 and a distributed control system, including a safety protocol module, a communication system building module, and a monitoring and control module;

[0080] Among them, the security protocol module is used to establish a physically isolated security channel in the power plant safety area I and establish a security protocol on the security channel; the communication system construction module is used to deploy a distributed intelligent monitoring system ICS and build deployment communication between the DCS system and the ICS system; the monitoring and control module is used to establish a real-time data monitoring mechanism through the ICS system to monitor and analyze the equipment operation data in real time.

[0081] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0082] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0083] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic devices), a portable computer disk case (magnetic devices), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0084] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logical function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc. It should be noted that the above embodiments are only used to illustrate the technical solution of the present invention and are not limited. Although the present invention is described in detail with reference to the preferred embodiments, it should be understood by those skilled in the art that the technical solution of the present invention can be modified or replaced by equivalents without departing from the spirit and scope of the technical solution of the present invention, which should be included in the scope of the claims of the present invention.

[0085] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for safety integration between a power plant safety zone 1 and a distributed control system, characterized in that: include: Establish physically isolated safety passages in the power plant safety zone I and establish safety protocols on the safety passages; Deploy the distributed intelligent monitoring system ICS and build deployment communication between the DCS system and the ICS system; Establish a real-time data monitoring mechanism through the ICS system to monitor and analyze equipment operation data in real time; The real-time data monitoring mechanism established through the ICS system includes deploying a distributed intelligent monitoring system ICS inside the first safety zone of the power plant to collect data in real time, conduct intelligent analysis, and centrally manage and monitor the equipment of each safety unit. Potential threats are identified by real-time monitoring of the operating status and communication data of the safety equipment. Based on the real-time and historical data of the power plant ICS, real-time data access is achieved through the ICS data center. The operating data of the equipment in different cycles is used as the data source for big data analysis and mining. According to the normal operating parameter range of the unit under different load conditions, the dynamic alarm threshold of the operating parameter is set. The potential threat analysis includes early warning in the real-time data collection stage, early warning of intelligent analysis, and early warning of centralized management of the unit. Early warnings during the real-time data collection phase include real-time access to the operating data of each unit through the ICS data center, monitoring access delays, and recording data access delay alarms if data access delays exceed 1 second. If the data missing rate exceeds 0.1%, a data integrity alarm is recorded. If both the data access delay and the data missing rate exceed the threshold at the same time within a single data collection cycle, it is considered that there is a network or equipment failure, triggering an emergency alarm and notifying maintenance personnel. Intelligent analysis and early warning include identification of senders and receivers during data transmission. When abnormal communication data is detected from the same sender continuously, the sender is identified as a potential threat and the information generated by the public key and private key is sent to the operation and maintenance personnel. When abnormal communication data is detected from the same receiver continuously, the receiving unit is identified, and a centralized management early warning is issued for the unit, and an attack alarm is sent to the operation and maintenance personnel. The centralized management warning of the unit includes individual control of the unit based on the dynamic alarm threshold of the set operating parameters, setting 100 data transmissions as one round of data transmission for a unit, triggering the centralized management of the unit when data continuously exceeds the threshold range, and uniformly comparing the data of the same type of units. When only one unit has data abnormalities or more than one unit has data abnormalities but the intervals of continuous abnormalities are different, the original isolation method is maintained. When more than one unit has data abnormalities in the same interval, the original isolation method is switched to one-way network domain isolation. If the original isolation method is one-way network domain isolation, an isolation alarm is issued; The real-time monitoring and analysis of equipment operation data includes establishing an independent CD network between the DCS system and the ICS system, and performing ABCD four-network intercommunication communication only at the interface switch; The real-time monitoring and analysis of the equipment operation data includes setting a data backup and recovery mechanism in the DCS system and the ICS system, and performing incremental backup of the real-time data of the connected units by setting system scheduled tasks and combining the current utilization rate of server resources. The incremental backup is expressed as: Among them, α is the weight coefficient, D(t′) represents the data change, C(t′) represents the CPU usage at time t′, and C max represents the maximum CPU usage, M(t′) represents the memory usage at time t′, and M max represents the maximum memory usage, β represents the decay coefficient, and H(t′) represents the data integrity rate at time t′. When the system detects a negative value in incremental backup, it means that resource utilization is too high and backup is limited. Set regular work reminders to automatically remind operators to perform regular data backups based on the system's built-in Diracdelta function and server resource utilization, expressed as: Among them, R(t) represents the importance of backup, δ(tt i ) represents the Dirac delta function, t i represents the reminder time point, λ represents the adjustment coefficient, U(t i ) indicates that at time t i The server resource utilization rate, N represents the total number of backups in a cycle; Establish a system fault-tolerant mechanism, and identify abnormal CPU time consumption and memory usage by building an error code system, a system abnormal operation system, a data set abnormality monitoring system, and a resource operation monitoring system.

2. The method for safety integration of a power plant safety zone 1 and a distributed control system as claimed in claim 1, characterized in that: The establishment of a physically isolated safety channel in the power plant safety zone I includes establishing a physically isolated safety channel in the power plant safety zone I, adopting a network security firewall, and performing real-time encryption and decryption of communication data.

3. The method for safety integration of a power plant safety zone 1 and a distributed control system as claimed in claim 2, characterized in that: The establishing of a security protocol on a secure channel includes establishing a security protocol on a secure channel, authenticating and controlling access to communication data to prevent unauthorized access and operation. The security protocol adopts an AES-CTR encryption algorithm and a dynamic key exchange technology. An identity authentication process is first performed based on a user password using the AES-CTR encryption algorithm. After the identity authentication is passed, a pair of keys including a public key and a private key is generated. The generated public key is used to encrypt messages. Before sending the message, the sender uses the private key to digitally sign the message. After receiving the encrypted message, the receiver uses the public key to verify the signature to prove that the data transmission has been authorized and there is no illegal operation.

4. The method for safety integration of a power plant safety zone 1 and a distributed control system as claimed in claim 3, characterized in that: The establishment of a security protocol on the security channel also includes building network isolation between different units in the first security zone, building a DCS network domain, an ICS network domain, and an equipment unit network domain, setting up one-way network domain isolation or soft one-way isolation for different unit equipment, building an ICS system for each unit and the public system separately, and then sending data of different units to the ICS platform on the public system side, respectively, to prevent interaction and intercommunication between units; Set the unit safety information level, which is divided into high safety level and other safety levels; Set the unit data type, divided into key control operations and data analysis; Set up a one-way network domain for units with high security levels or critical control operations. Select soft one-way isolation when the device is at other security levels and the data type is data analysis.

5. A system using the method for safety integration of a power plant safety zone 1 and a distributed control system as claimed in any one of claims 1 to 4, characterized in that: Including security protocol module, communication system construction module, monitoring and control module; The safety protocol module is used to establish a physically isolated safety channel in the safety area I of the power plant and establish a safety protocol on the safety channel; The communication system building module is used to deploy the distributed intelligent monitoring system ICS and build deployment communication between the DCS system and the ICS system; The monitoring and control module is used to establish a real-time data monitoring mechanism through the ICS system to perform real-time monitoring and analysis of equipment operation data.

6. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method for safety integration of a power plant safety zone 1 with a distributed control system according to any one of claims 1 to 4 are implemented.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for safety integration of a power plant safety zone 1 with a distributed control system according to any one of claims 1 to 4 are implemented.

Images