Network security reinforcement method and equipment for power monitoring system

Abstract

The invention provides a network security reinforcement method and device for an electric power monitoring system, and relates to the technical field of network security reinforcement, and the network security reinforcement method for the electric power monitoring system comprises the following steps: S100, collecting network information of a power grid system in real time; step S200, sensing whether the network information is abnormal; s300, abnormal information is fed back to a management user; step S400, intelligently reinforcing the network according to the abnormal information; the network security reinforcement equipment is used for the longitudinal encryption authentication of the operation equipment in the network security reinforcement method for the power monitoring system. According to the scheme, when the operation equipment with the abnormal network protocol appears, the system automatically identifies, analyzes and decides so as to ensure the access and use safety of the operation equipment in the power grid system, avoid the access of unauthorized equipment, ensure that the network safety in the power monitoring system can be stably and safely reinforced, and improve the safety of the power monitoring system. And the equipment is prevented from being replaced or the network is prevented from being invaded.

Description

Technical Field

[0001] The present invention relates to the technical field of network security reinforcement, and in particular to a network security reinforcement method and device for an electric power monitoring system. Background Art

[0002] The power monitoring system mainly uses computers, communication equipment, and measurement and control units as basic tools, providing a basic platform for real-time data collection, switch status detection, and remote control of the power distribution system. It can form an arbitrarily complex monitoring system with detection and control equipment, and plays a core role in power distribution monitoring. It can help enterprises eliminate islands, reduce operating costs, improve production efficiency, and speed up the response to abnormalities in the power distribution process.

[0003] At present, the network security requirements for power monitoring systems are becoming more and more stringent. A network security situation awareness system for power monitoring systems is often established to achieve all-round and all-weather network security situation awareness of various power monitoring systems within the power grid company, so as to timely discover various network security risks and illegal access incidents, thereby achieving situation awareness and early warning of network security for the power monitoring system.

[0004] However, when faced with authorized network access devices or new network access devices, it is impossible to accurately collect and analyze whether the network protocol of the device meets the preset standards, and network fluctuations of authorized devices cannot be detected and discovered in a timely manner; the network protocol of the access equipment in the power grid system is not convenient for abnormal detection.

[0005] Therefore, it is necessary to provide a network security reinforcement method for a power monitoring system to solve the above technical problems. Summary of the invention

[0006] The present invention provides a network security reinforcement method for an electric power monitoring system, which solves the problem in the related art that the network protocol of access equipment in the power grid system is inconvenient for abnormality detection.

[0007] In order to solve the above technical problems, the present invention provides a network security reinforcement method for a power monitoring system, comprising the following steps:

[0008] Step S100, collecting network information of the power grid system in real time, analyzing the data link layer protocol in the power grid communication network through a network protocol analyzer, establishing an IP address management database for the power grid system, allocating and managing IP addresses for all devices connected to the network, and obtaining network information for access to the power grid system;

[0009] Step S200, sensing whether the network information is abnormal, and analyzing whether the collected network information is within the preset security information model;

[0010] Step S210: if the collected network information is in the security information model, then re-enter step S100 to continue monitoring the network information of the power grid system;

[0011] Step S220, if the collected network information is not in the security information model, extract the network information and convert it into abnormal information, and proceed to step S300 to perform subsequent reinforcement of network security;

[0012] Step S300, the abnormal information is fed back to the management user, and the network security hardening system is used to perform network retrieval and analyze whether the network protocol of the abnormal information is safe and reliable, and the abnormal information and the retrieved device information are automatically fed back to the management user;

[0013] Step S400: Intelligently reinforce the network according to the abnormal information, and manage the user to authorize the network security reinforcement system to update and reinforce the power grid system.

[0014] Preferably, in step S100, the network protocol analyzer also collects the source address, destination address, and frame type of the data packet; also monitors the error rate and number of retransmissions at the data link layer; performs in-depth analysis of specific industrial control protocols; and merges and generates key information in the substation automation system.

[0015] Preferably, the key information mainly includes device status information and control command information; when the device status information detected by the system is within a preset security information model, the control command information of the device can be automatically authorized and run.

[0016] Preferably, when the device status information detected by the system is not in the preset security information model, the status information and the control command information of the device are marked to generate an abnormal data packet; the control command information of the device needs to be authorized by the management user for normal use.

[0017] Preferably, the network security reinforcement system comprises a feature data extraction module, a network security perception module, a network security management module and a linkage reinforcement module, wherein the feature data extraction module is signal-connected to the network security perception module, the network security perception module is signal-connected to the network security management module, and the network security management module is signal-connected to the linkage reinforcement module;

[0018] The feature extraction unit is used to collect network information of running equipment in the power grid system;

[0019] The network security perception module is used to perceive and analyze whether network information is abnormal;

[0020] The network security management module is used to automatically feed back abnormal information to the management user;

[0021] The linkage reinforcement module is used to receive abnormal information and can update the preset security information model after review and authorization by the management user.

[0022] Preferably, the feature extraction module includes an operation information collection unit, a network status collection unit and a user information collection unit. The operation information collection unit is used to collect basic information of the operating device; the network status collection unit is used to collect the operation traffic after the operating device is connected for real-time monitoring and analysis; the user information collection unit is used to collect user information of the operating device logging into the network security protocol.

[0023] Preferably, the network security perception module includes an operation information identification and analysis unit, a network status identification and analysis unit and a user information identification and analysis unit, and the operation information identification and analysis unit is used to analyze whether the basic information matches the basic information model recorded in the security information model;

[0024] The network status identification and analysis unit is used to analyze whether the operation traffic matches the operation traffic standard recorded in the security information model;

[0025] The user information identification and analysis unit is used to analyze whether the user information matches the user information recorded in the security information model.

[0026] Preferably, the network security management module includes an abnormality push unit, a reinforcement solution optimization unit and a security suggestion display unit, and the abnormality push unit is used to push abnormal information to the terminal device of the management user;

[0027] The reinforcement scheme optimization unit is used to generate a reinforcement scheme for abnormal information based on intelligent identification, retrieval and organization of abnormal information, so as to optimize and update the preset security information model;

[0028] The security suggestion display unit is used to display the reinforcement plan generated by the reinforcement plan optimization unit, which is convenient for management users to read.

[0029] Preferably, the linkage reinforcement module includes an automatic update reinforcement unit and a manual update reinforcement unit. The automatic update reinforcement unit is used to manage the automatic update reinforcement of the security information model after user authorization; the manual update reinforcement unit is used to manually add new device information to manually update and reinforce the security information model.

[0030] The present invention further provides a network security reinforcement device, which is used for the longitudinal encryption authentication of the running device in the network security reinforcement method for the power monitoring system, and the network security reinforcement device comprises:

[0031] A casing, wherein a sliding hole and a heat dissipation hole are provided on the casing;

[0032] An installation angle piece, wherein the installation angle piece is in an L-shaped structure, one end of the installation angle piece passes through the sliding hole and is inserted into the interior of the housing, and the installation angle piece is slidably connected to the housing;

[0033] A first telescopic member, the first telescopic member is mounted on the housing, a moving end of the first telescopic member is connected to the mounting angle member, and the first telescopic member is used to drive the mounting angle member to move and adjust relative to the housing;

[0034] A switch plate, the switch plate being slidably mounted on the housing, the switch plate being arranged corresponding to the heat dissipation holes;

[0035] A second telescopic member, the second telescopic member is installed in the housing, and the second telescopic member is used to drive the switch plate to move horizontally;

[0036] There are two mounting angle pieces, which are symmetrically mounted on both sides of the housing, and the mounting angle pieces, the sliding holes and the first telescopic piece are arranged in a one-to-one correspondence.

[0037] Compared with the related art, the network security reinforcement method for the power monitoring system provided by the present invention has the following beneficial effects:

[0038] It is convenient to monitor the network protocol of the running equipment in real time. When there is an operating device with abnormal network protocol, the system automatically identifies and analyzes it and makes decisive decisions to ensure the security of access and use of running equipment in the power grid system, avoid access of unauthorized equipment, and ensure that the network security in the power monitoring system can be stably and safely reinforced to prevent equipment from being replaced or the network from being invaded. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0040] Figure 1 A method flow chart of a network security reinforcement method for an electric power monitoring system provided by the present invention;

[0041] Figure 2 A system flow chart of the network security reinforcement method for an electric power monitoring system provided by the present invention;

[0042] Figure 3A system block diagram of a network security reinforcement system in a network security reinforcement method for an electric power monitoring system provided by the present invention;

[0043] Figure 4 for Figure 3 The system block diagram of the feature data extraction module shown;

[0044] Figure 5 for Figure 3 The system block diagram of the network security perception module shown;

[0045] Figure 6 for Figure 3 The system block diagram of the network security management module shown;

[0046] Figure 7 for Figure 3 The system block diagram of the linkage reinforcement module shown;

[0047] Figure 8 A three-dimensional diagram of the network security reinforcement device provided by the present invention;

[0048] Fig. 9 for Figure 8 The schematic diagram of the structure of the housing part in plan view shown;

[0049] Fig.10 for Fig. 9 An enlarged schematic diagram of section A is shown;

[0050] Fig.11 for Fig. 9 An enlarged schematic diagram of portion B is shown;

[0051] Fig.12 This is a schematic diagram of the use of the network security reinforcement device provided by the present invention, wherein: Fig.12 (a) is a top view of the installation corner piece during movement. Fig.12 (b) is a top view of the installation angle piece moved to the assembly state for use. Fig.12 (c) Fig.12 (a) The top view of the corresponding switch plate during movement. Fig.12 (d) Fig.12 (b) A top view of the corresponding switch plate when it is moved to the assembled state for use.

[0052] Description of Figure Numbers:

[0053] 1. Casing; 101. Sliding hole; 102. Adjustment slot; 103. Heat dissipation hole;

[0054] 2. Install corner fittings;

[0055] 3. first telescopic member; 31. torsion member; 32. threaded member;

[0056] 4. Switch board;

[0057] 5. The second telescopic member.

[0058] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0059] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0060] The invention provides a network security reinforcement method for an electric power monitoring system.

[0061] Please refer to Figure 1 to Figure 2 In the present invention, a network security reinforcement method for a power monitoring system comprises the following steps:

[0062] Step S100, collecting network information of the power grid system in real time, analyzing the data link layer protocol in the power grid communication network through a network protocol analyzer, establishing an IP address management database for the power grid system, allocating and managing IP addresses for all devices connected to the network, and obtaining network information for access to the power grid system;

[0063] Step S200, sensing whether the network information is abnormal, and analyzing whether the collected network information is within the preset security information model;

[0064] Step S210: if the collected network information is in the security information model, then re-enter step S100 to continue monitoring the network information of the power grid system;

[0065] Step S220, if the collected network information is not in the security information model, extract the network information and convert it into abnormal information, and proceed to step S300 to perform subsequent reinforcement of network security;

[0066] Step S300, the abnormal information is fed back to the management user, and the network security hardening system is used to perform network retrieval and analyze whether the network protocol of the abnormal information is safe and reliable, and the abnormal information and the retrieved device information are automatically fed back to the management user;

[0067] Step S400: Intelligently reinforce the network according to the abnormal information, and manage the user to authorize the network security reinforcement system to update and reinforce the power grid system.

[0068] In the power grid system, before the running equipment is connected to the power grid system, a security information model is built in advance to record the access network protocol, access equipment information and access user information of the running equipment;

[0069] On the one hand, it is convenient to view the relevant information of the authorized running device from the security information model, including brand information, model information, and IP information;

[0070] On the other hand, when accessing a running device, it can automatically identify and analyze whether the running device belongs to the running device authorized in the security information model;

[0071] Avoid inconsistency between registered equipment and actual access equipment, improve the consistency of equipment used in the power grid system; avoid brand equipment being replaced by other equipment.

[0072] In this embodiment, the security information model includes the fluctuation range allowed by the network protocol of the authorized device; when the running device exceeds the fluctuation range of the network protocol, the system automatically identifies and generates abnormal information, and stops the operation of the running device.

[0073] It is convenient to monitor the network protocol of the running equipment in real time. When there is an operating device with abnormal network protocol, the system automatically identifies and analyzes it and makes decisive decisions to ensure the security of access and use of running equipment in the power grid system, avoid access of unauthorized equipment, and ensure that the network security in the power monitoring system can be stably and safely reinforced to prevent equipment from being replaced or the network from being invaded.

[0074] Specifically, in step S100, the network protocol analyzer also collects the source address, destination address, and frame type of the data packet; monitors the error rate and number of retransmissions at the data link layer; performs in-depth analysis of specific industrial control protocols; and combines and generates key information in the substation automation system.

[0075] A network protocol analyzer is used to analyze the data link layer protocol in the power grid communication network; the error rate, number of retransmissions and other indicators of the data link layer are monitored to evaluate the stability and reliability of the network; and it is used for data link layer information collection.

[0076] Specifically, the key information mainly includes device status information and control command information; when the device status information detected by the system is within the preset security information model, the control command information of the device can be automatically authorized and run.

[0077] When the device status information detected by the system is not in the preset security information model, the status information and the control command information of the device are marked to generate an abnormal data packet; the control command information of the device needs to be authorized by the management user for normal use.

[0078] For details, please refer to Figures 3 to 7 , the network security reinforcement system includes a feature data extraction module, a network security perception module, a network security management module and a linkage reinforcement module, the feature data extraction module is signal-connected to the network security perception module, the network security perception module is signal-connected to the network security management module, and the network security management module is signal-connected to the linkage reinforcement module;

[0079] The feature extraction unit is used to collect network information of running equipment in the power grid system;

[0080] The network security perception module is used to perceive and analyze whether network information is abnormal;

[0081] The network security management module is used to automatically feed back abnormal information to the management user;

[0082] The linkage reinforcement module is used to receive abnormal information and can update the preset security information model after review and authorization by the management user.

[0083] In this embodiment, information collection adopts physical layer information collection, data link layer information collection, network layer information collection, application layer information collection and storage and processing of collected data.

[0084] Physical layer information collection includes sensor monitoring and smart meter data collection;

[0085] Data link layer information collection includes network protocol analysis and switch port mirroring;

[0086] Network layer information collection includes network traffic monitoring and IP address management;

[0087] Application layer information collection includes SCADA system data collection, energy management system data collection and intelligent inspection system;

[0088] Data storage and processing include data storage and data processing;

[0089] The collected data is cleaned, converted and analyzed to remove noise and abnormal data and extract useful information. Data mining, machine learning and other technologies are used to predict and evaluate the operating status of the power grid, providing support for the optimized operation and fault diagnosis of the power grid. Through data visualization technology, the processed data is displayed in an intuitive chart form to facilitate decision-making and monitoring by managers.

[0090] Build a network security reinforcement system to collect real-time status information of connected running devices, identify and analyze the collected information, and determine whether the status information is within the preset security network information model. In the event of abnormal status information, the running device with abnormal information will be automatically fed back to the management user, and the running device with abnormal information will be automatically terminated until it is re-authorized by the management user.

[0091] Specifically, the feature extraction module includes an operation information collection unit, a network status collection unit and a user information collection unit. The operation information collection unit is used to collect basic information of the operating device; the network status collection unit is used to collect the operating traffic after the operating device is connected for real-time monitoring and analysis; the user information collection unit is used to collect user information of the operating device logging into the network security protocol.

[0092] Only network security managers who are authorized to log in can apply for registration, access and use of operating equipment through network protocols; preventing non-management personnel from including external equipment in the power grid system to steal or tamper with network information.

[0093] The operating information, network status and corresponding user information of the running equipment are collected to ensure that each running equipment has a corresponding management personnel, and the access identity of the running equipment is authenticated and identified. When an abnormality occurs in the equipment, it is convenient to quickly find the corresponding user information; to quickly find the maintenance management personnel of the corresponding access running equipment.

[0094] Specifically, the network security perception module includes an operation information identification and analysis unit, a network status identification and analysis unit, and a user information identification and analysis unit, and the operation information identification and analysis unit is used to analyze whether the basic information matches the basic information model recorded in the security information model;

[0095] The network status identification and analysis unit is used to analyze whether the operation traffic matches the operation traffic standard recorded in the security information model;

[0096] The user information identification and analysis unit is used to analyze whether the user information matches the user information recorded in the security information model.

[0097] In this embodiment, the security information model is preset with records of basic information for matching operating equipment, operating flow standard information and user information.

[0098] When it is necessary to add new network equipment in the power grid system, report it to the management user in advance. The management user will enter the basic information, operating traffic and user information of the newly added network equipment into the security information model in advance to provide advance data support for the subsequent access and use of the network equipment.

[0099] The collected operation information, network information and user information are compared and identified to determine whether it is the operating equipment included in the records, so as to ensure the security and reliability of the network protocol and network communication of the operating equipment.

[0100] Specifically, the network security management module includes an abnormality push unit, a reinforcement solution optimization unit and a security suggestion display unit, and the abnormality push unit is used to push abnormal information to the terminal device of the management user;

[0101] The reinforcement scheme optimization unit is used to generate a reinforcement scheme for abnormal information based on intelligent identification, retrieval and organization of abnormal information, so as to optimize and update the preset security information model;

[0102] The security suggestion display unit is used to display the reinforcement plan generated by the reinforcement plan optimization unit, which is convenient for management users to read.

[0103] The abnormal push unit directly pushes the relevant information of the abnormal running device to the terminal device of the management user. The management user checks and determines whether the abnormal data needs to be authorized through the terminal device. If so, the relevant information of the abnormal running device is automatically updated to the preset security information model to realize automatic reinforcement of network security.

[0104] If not, the relevant information of the abnormally running device is recorded and authenticated as an unauthorized protocol device, and it cannot be connected to the power grid system network.

[0105] When the system re-detects relevant information of unauthorized protocol devices, the system can automatically identify and intelligently disconnect the operating equipment from the power grid system, making it impossible for the unauthorized operating equipment to access the power grid system.

[0106] Specifically, the linkage reinforcement module includes an automatic update reinforcement unit and a manual update reinforcement unit. The automatic update reinforcement unit is used to manage the automatic update reinforcement of the security information model after user authorization; the manual update reinforcement unit is used to manually add new device information to manually update and reinforce the security information model.

[0107] The automatic update and reinforcement unit facilitates automatic identification of unauthorized protocol devices and provides support for security reinforcement of the power grid system; the manual update and reinforcement unit is used to manage users to update and reinforce running devices that require authorized access in advance; it facilitates unified authorization management of running devices in the power grid system.

[0108] Please refer to Figure 8 and Fig. 9The present invention also provides a network security reinforcement device, which is used for the longitudinal encryption authentication of the running device in the network security reinforcement method for the power monitoring system, and the network security reinforcement device includes:

[0109] A housing 1, wherein a sliding hole 101 and a heat dissipation hole 103 are provided on the housing 1;

[0110] An installation angle piece 2, wherein the installation angle piece 2 is an L-shaped structure, one end of the installation angle piece 2 passes through the sliding hole 101 and is inserted into the interior of the housing 1, and the installation angle piece 2 is slidably connected to the housing 1;

[0111] A first telescopic member 3, wherein the first telescopic member 3 is mounted on the housing 1, wherein a moving end of the first telescopic member 3 is connected to the mounting angle member 2, and the first telescopic member 3 is used to drive the mounting angle member 2 to move and adjust relative to the housing 1;

[0112] A switch plate 4, wherein the switch plate 4 is slidably mounted on the housing 1, and the switch plate 4 is arranged corresponding to the heat dissipation holes 103;

[0113] A second telescopic member 5, the second telescopic member 5 is installed in the housing 1, and the second telescopic member 5 is used to drive the switch plate 4 to move horizontally;

[0114] There are two mounting angle pieces 2 , which are symmetrically mounted on both sides of the housing 1 , and the mounting angle pieces 2 , the sliding holes 101 , and the first telescopic piece 3 are arranged in a one-to-one correspondence.

[0115] In this embodiment, the mounting angle piece 2 is retractably and slidably mounted on the housing 1;

[0116] The installation angle piece 2 includes two usage states:

[0117] In the packaging and transportation state, the mounting angle piece 2 is retracted on the housing 1, and the mounting angle piece 2 does not protrude outward, which facilitates the packaging and transportation of the entire housing 1;

[0118] In the assembly state, the mounting angle piece 2 is extended on the housing 1, and the mounting angle piece 2 is protruding outward, so as to be easily assembled with the cabinet.

[0119] In this embodiment, the mounting angle piece 2 is provided with an assembly opening, which matches the mounting opening on the cabinet, so as to facilitate the assembly of the housing 1 on the cabinet.

[0120] In this embodiment, the connection between the switch board 4 and the housing 1 is slidingly sealed.

[0121] In this embodiment, the second telescopic member 5 is used to drive the switch plate 4 to move and adjust. When the switch plate 4 contracts, the heat dissipation holes 103 are opened; when the switch plate 4 extends, the heat dissipation holes 103 are closed.

[0122] By providing a retractable and adjustable mounting angle piece 2 on the housing 1, when the mounting angle piece 2 needs to be folded, the first retractable piece 3 is activated, and the first retractable piece 3 drives the mounting angle piece 2 to retract, and the mounting angle piece 2 is completely retracted to the surface of the housing 1, so that the housing 1 is conveniently packaged and transported as a whole to reduce the occupied space, avoid the mounting angle piece 2 from being bumped, and ensure the stability of the mounting angle piece 2 before use;

[0123] When the mounting angle piece 2 needs to be extended, the first telescopic piece 3 is started, and the first telescopic piece 3 drives the mounting angle piece 2 to extend. When the mounting angle piece 2 is fully extended, it is convenient to assemble the casing 1 on the cabinet, so as to facilitate the installation and use of the casing 1.

[0124] In an optional implementation of the present embodiment, the first telescopic member 3 is an electric telescopic rod, the fixed end of the electric telescopic rod is fixedly connected to the housing 1, and the telescopic end of the electric telescopic rod is fixedly connected to the mounting angle member 2, for directly driving the mounting angle member 2 to move and adjust.

[0125] In another optional implementation of this embodiment, please refer to Fig. 9 , Fig.10 and Fig.11 The housing 1 is also provided with an adjustment slot 102;

[0126] The first telescopic member 3 includes a torsion member 31 and a threaded member 32. The torsion member 31 is rotatably mounted on the housing 1 through the adjustment slot 102. One end of the threaded member 32 penetrates the housing 1 and is fixedly connected to the torsion member 31. The other end of the threaded member 32 penetrates the mounting angle member 2 and is threadedly connected.

[0127] In this embodiment, the mounting angle piece 2 is slidably connected to the housing 1 through the sliding hole 101 .

[0128] In this embodiment, the torsion member 31 and the threaded member 32 are on the same rotation axis, so that the rotation adjustment of the threaded member 32 can be conveniently controlled by the torsion member 31 ; while the threaded member 32 is rotated and adjusted, the movement adjustment of the installation angle member 2 can be conveniently controlled synchronously.

[0129] In this embodiment, the twisting member 31 can be any one of a cross nut, an inner hexagonal nut or an outer hexagonal nut; the twisting member 31 is completely received within the range of the adjustment slot 102 .

[0130] It is convenient to control the rotation of the twisting member 31 through a tool, and when the twisting member 31 rotates, the installation angle member 2 is controlled to be synchronously contracted or extended, so as to manually control the movement and adjustment of the installation angle member 2.

[0131] In an optional implementation of the present embodiment, the second telescopic member 5 may be an electric telescopic rod, the fixed end of which is fixedly mounted on the housing 1, and the telescopic end of which is fixedly connected to the switch plate 4, so as to directly drive the movement and adjustment of the switch plate 4.

[0132] In another optional implementation of the present embodiment, the second telescopic member 5 is a connecting rod, and two ends of the connecting rod are fixedly connected to the mounting angle member 2 and the switch plate 4 .

[0133] When the mounting angle piece 2 is moved and adjusted, the mounting angle piece 2 can also synchronously drive the switch plate 4 to be adjusted synchronously; ultimately, when the mounting angle piece 2 is switched from the packaging and transportation state to the use and assembly state, the switch plate 4 is synchronously opened, providing stable support for the overall operation and use of the casing 1.

[0134] Finally, when the installation angle piece 2 is switched from the assembly and filling state to the packaging and transportation state, the switch plate 4 is closed synchronously, providing space for shrinking and reducing ventilation during the packaging and transportation of the casing 1, thereby reducing the introduction of external air and dust.

[0135] The working principle of the network security hardening device provided in this embodiment is as follows:

[0136] like Fig.10 and Fig.11 As shown, it is possible to define that in the initial state, the equipment is in the packaging and transportation state;

[0137] Please refer to Figures 10 to 12 (a) to Fig.12 (b) When the angled mounting piece 2 is needed, the twisting piece 31 is twisted by an auxiliary tool (a cross cutter corresponds to a cross nut, an inner hexagonal rod corresponds to an inner hexagonal nut, and an outer hexagonal rod corresponds to an outer hexagonal nut), and the twisting piece 31 drives the threaded piece 32 to rotate, and the threaded piece 32 drives the angled mounting piece 2 to extend, so that the angled mounting piece 2 gradually extends out from the housing 1 until the assembly portion of the angled mounting piece 2 is completely exposed;

[0138] Please refer to Figure 11 to Figure 12 (c) to Fig.12(d) When the mounting angle piece 2 moves, the mounting angle piece 2 synchronously drives the switch plate 4 to move through the second telescopic piece 5, and the switch plate 4 gradually separates from the heat dissipation hole 103 when moving, so that the heat dissipation hole 103 is automatically opened;

[0139] like Fig.12 (b) and Fig.12 As shown in (d), the equipment is in the assembled state for use.

[0140] Finally, the movement and adjustment of the mounting angle piece 2 and the switch plate 4 can be realized synchronously under the action of the same driving power, so as to facilitate the shrinkage protection of the casing 1 during packaging and transportation, and facilitate the stretching and opening of the casing 1 during use and assembly.

[0141] The above description is only a preferred embodiment of the present invention, and does not limit the patent scope of the present invention. All equivalent structural changes made by using the contents of the present invention specification and drawings under the concept of the present invention, or directly / indirectly applied in other related technical fields are included in the patent protection scope of the present invention.

Claims

1. A network security reinforcement method for a power monitoring system, characterized in that: The following steps are involved: Step S100, collecting network information of the power grid system in real time, analyzing the data link layer protocol in the power grid communication network through a network protocol analyzer, establishing an IP address management database for the power grid system, allocating and managing IP addresses for all devices connected to the network, and obtaining network information for access to the power grid system; Step S200, sensing whether the network information is abnormal, and analyzing whether the collected network information is within the preset security information model; Step S210: if the collected network information is in the security information model, then re-enter step S100 to continue monitoring the network information of the power grid system; Step S220, if the collected network information is not in the security information model, extract the network information and convert it into abnormal information, and proceed to step S300 to perform subsequent reinforcement of network security; Step S300, the abnormal information is fed back to the management user, and the network security hardening system is used to perform network retrieval and analyze whether the network protocol of the abnormal information is safe and reliable, and the abnormal information and the retrieved device information are automatically fed back to the management user; Step S400: Intelligently reinforce the network according to the abnormal information, and manage the user to authorize the network security reinforcement system to update and reinforce the power grid system.

2. The network security reinforcement method for a power monitoring system according to claim 1 is characterized in that: In step S100, the network protocol analyzer also collects the source address, destination address, and frame type of the data packet of the running device; also monitors the error rate and retransmission times of the data link layer; performs in-depth analysis of the control protocol; and merges and generates key information.

3. The network security reinforcement method for a power monitoring system according to claim 2 is characterized in that: The key information mainly includes device status information and control command information; when the device status information detected by the system is within the preset security information model, the control command information of the device can be automatically authorized and run.

4. The network security reinforcement method for a power monitoring system according to claim 3 is characterized in that: When the device status information detected by the system is not in the preset security information model, the status information and the control command information of the device are marked to generate an abnormal data packet; the control command information of the device needs to be authorized by the management user for normal use.

5. The network security reinforcement method for a power monitoring system according to claim 4 is characterized in that: The network security reinforcement system includes a feature data extraction module, a network security perception module, a network security management module and a linkage reinforcement module, wherein the feature data extraction module is signal-connected to the network security perception module, the network security perception module is signal-connected to the network security management module, and the network security management module is signal-connected to the linkage reinforcement module; The feature extraction unit is used to collect network information of running equipment in the power grid system; The network security perception module is used to perceive and analyze whether network information is abnormal; The network security management module is used to automatically feed back abnormal information to the management user; The linkage reinforcement module is used to receive abnormal information and can update the preset security information model after review and authorization by the management user.

6. The network security reinforcement method for a power monitoring system according to claim 5 is characterized in that: The feature extraction module includes an operation information collection unit, a network status collection unit and a user information collection unit, wherein the operation information collection unit is used to collect basic information of the operation device; The network status collection unit is used to collect the running traffic after the running device is connected; The user information collection unit is used to collect user information of the running device logging into the network security protocol.

7. The network security reinforcement method for a power monitoring system according to claim 6 is characterized in that: The network security perception module includes an operation information identification and analysis unit, a network status identification and analysis unit and a user information identification and analysis unit, wherein the operation information identification and analysis unit is used to analyze whether the basic information matches the basic information model recorded in the security information model; The network status identification and analysis unit is used to analyze whether the operation traffic matches the operation traffic standard recorded in the security information model; The user information identification and analysis unit is used to analyze whether the user information matches the user information recorded in the security information model.

8. The network security reinforcement method for a power monitoring system according to claim 7, characterized in that: The network security management module includes an abnormality push unit, a reinforcement solution optimization unit and a security suggestion display unit. The abnormality push unit is used to push abnormal information to the terminal device of the management user; The reinforcement scheme optimization unit is used to generate a reinforcement scheme for abnormal information based on intelligent identification, retrieval and organization of abnormal information, so as to optimize and update the preset security information model; The security suggestion display unit is used to display the reinforcement plan generated by the reinforcement plan optimization unit, which is convenient for management users to read.

9. The network security reinforcement method for a power monitoring system according to claim 8, characterized in that: The linkage reinforcement module includes an automatic update reinforcement unit and a manual update reinforcement unit. The automatic update reinforcement unit is used to manage the automatic update reinforcement of the security information model after user authorization; the manual update reinforcement unit is used to manually add new device information to manually update and reinforce the security information model.

10. A network security reinforcement device, used for vertical encryption authentication of a running device in a network security reinforcement method for a power monitoring system as claimed in any one of claims 1 to 9.

Images