Configuration method and device based on intelligent oscillograph and electronic equipment

Abstract

The invention discloses a configuration method and device based on an intelligent oscillograph and electronic equipment. Relates to the technical field of power systems. The method comprises the steps that an operation plan sent by a power grid management platform is received through a target server, the target server comprises a server of a network safety remote operation and maintenance master station, and the network safety remote operation and maintenance master station is deployed in a safety IV area of a power system and used for conducting remote operation and maintenance management on equipment in the power system; a security and protection strategy table associated with the operation plan in the target server is obtained, and the security and protection strategy table is used for recording configuration information associated with the transformer substation; and generating an oscillograph configuration table based on the security policy table, and configuring the intelligent oscillograph based on the oscillograph configuration table. According to the invention, the technical problem of low efficiency caused by manual field configuration of the intelligent oscillograph when the intelligent oscillograph is connected to the information protection master station in the prior art is solved.

Description

Technical Field

[0001] The present invention relates to the technical field of power systems, and in particular to a configuration method, device and electronic equipment based on an intelligent recorder. Background Art

[0002] As time goes by, more and more substations need to be renovated. As an important device on the substation side, the intelligent recorder is increasingly connected to the dispatching data network. As the operation and maintenance of substation secondary equipment gradually transforms from "manual-automatic, local-remote", the intelligent recorder, as an important carrier of the collection, forwarding, monitoring and control functions of the security master station, is still in the mode of manual configuration of network security policies when connected to the security master station.

[0003] In the related art, the strategy configuration of the intelligent recorder to access the Baoxin master station requires the master station personnel and the factory station personnel to arrive at the site and manually configure the master station encryption device, factory station encryption device, switch and other equipment through the manufacturer. On the one hand, it is not only labor-intensive, but also easy to cause confusion among various manufacturers on site (device manufacturers, switch manufacturers, secondary security manufacturers), and configuration errors are easy; on the other hand, the master station needs to spend a lot of waiting and communication time to cooperate with the factory station configuration strategy. Therefore, in the related art, the efficiency and accuracy of the strategy configuration of the intelligent recorder are low.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] The embodiments of the present invention provide a configuration method, device and electronic device based on an intelligent recorder, so as to at least solve the technical problem in the related art that when the intelligent recorder is connected to a security main station, the on-site manual configuration of the intelligent recorder is inefficient.

[0006] According to one aspect of an embodiment of the present invention, a configuration method based on an intelligent recorder is provided, comprising: receiving an operation plan sent by a power grid management platform through a target server, wherein the target server comprises: a server of a network security remote operation and maintenance main station, the operation plan comprises: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management on the equipment in the power system; obtaining a security policy table associated with the operation plan in the target server, wherein the security policy table is used to record configuration information associated with the substation; based on the security policy table, generating a recorder configuration table, and configuring the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table comprises: address information of the intelligent recorder and port information of the intelligent recorder.

[0007] Furthermore, the intelligent recorder is configured based on the recorder configuration table, including: encrypting the recorder configuration table to obtain an encrypted recorder configuration table; using the power dispatching data network of the power system to send the encrypted recorder configuration table to the intelligent recorder to configure the address of the intelligent recorder and the port of the intelligent recorder.

[0008] Furthermore, based on the security strategy table, a recorder configuration table is generated, including: sending the security strategy table to a network security remote operation and maintenance master station, wherein the network security remote operation and maintenance master station is deployed in safety zone I of the power system; based on the security strategy table, generating the recorder configuration table using the network security remote operation and maintenance master station.

[0009] Furthermore, after obtaining the security policy table associated with the job plan in the target server, it also includes: configuring the master station end encryption device configuration table, the plant station end encryption device configuration table and the switch configuration table based on the security policy table, wherein the master station end encryption device configuration table is used to configure the encryption machine of the master station in the safety zone I in the power system, the plant station end encryption device configuration table is used to configure the parameters of the encryption machine in the plant station in the safety zone I, and the switch configuration table is used to configure the parameters of the switch in the safety zone I.

[0010] Furthermore, the content in the security strategy table includes at least one of the following: address information of the intelligent recorder associated with the substation, port information of the intelligent recorder, management address of the vertical encryption authentication device, virtual LAN information of the switch and port number of the switch, and address information of the security master station.

[0011] According to another aspect of an embodiment of the present invention, a configuration system based on an intelligent recorder is also provided. The configuration system based on the intelligent recorder is used to execute a configuration method based on an intelligent recorder, including: a power grid management platform, used to write an operation plan, and send the operation plan to a target server, wherein the target server includes: a server of a network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management on the equipment in the power system; a target server, used to receive the operation plan sent by the power grid management platform, and obtain a security policy table associated with the operation plan in the target server, wherein the security policy table is used to record configuration information associated with the substation; the network security remote operation and maintenance main station, used to generate a recorder configuration table based on the security policy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table records: address information of the intelligent recorder and port information of the intelligent recorder.

[0012] Furthermore, the network security remote operation and maintenance main station is deployed in the safety zone I of the power system, the target server is deployed in the safety zone III of the power system, and the power grid management platform is deployed in the safety zone IV of the power system.

[0013] Furthermore, the configuration system based on the intelligent recorder also includes: an encryption machine and a forward and reverse isolation device, the forward and reverse isolation device is deployed in the security zone I, and the forward and reverse isolation device is connected to the target server and the network security remote operation and maintenance main station.

[0014] According to another aspect of an embodiment of the present invention, a configuration device based on an intelligent recorder is also provided, including: a receiving unit, used to receive an operation plan sent by a power grid management platform through a target server, wherein the target server includes: a server of a network security remote operation and maintenance main station, and the operation plan includes: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management on the equipment in the power system; an acquisition unit, used to obtain a security policy table associated with the operation plan in the target server, wherein the security policy table is used to record configuration information associated with the substation; a processing unit, used to generate a recorder configuration table based on the security policy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder and port information of the intelligent recorder.

[0015] Furthermore, the processing unit includes: a processing subunit, used to encrypt the recorder configuration table to obtain an encrypted recorder configuration table; a first sending subunit, used to use the power dispatching data network of the power system to send the encrypted recorder configuration table to the intelligent recorder to configure the address of the intelligent recorder and the port of the intelligent recorder.

[0016] Furthermore, the processing unit includes: a second sending sub-unit, used to send the security strategy table to the network security remote operation and maintenance main station, wherein the network security remote operation and maintenance main station is deployed in the safety zone I of the power system; a generating sub-unit, used to generate the recorder configuration table based on the security strategy table using the network security remote operation and maintenance main station.

[0017] Furthermore, the configuration device based on the intelligent recorder also includes: a configuration unit, which is used to configure the master station encryption device configuration table, the plant station encryption device configuration table and the switch configuration table based on the security policy table after obtaining the security policy table associated with the job plan in the target server, wherein the master station encryption device configuration table is used to configure the encryption machine of the master station in the safety zone I in the power system, the plant station encryption device configuration table is used to perform parameter configuration of the encryption machine in the plant station in the safety zone I, and the switch configuration table is used to perform parameter configuration of the switch in the safety zone I.

[0018] Furthermore, the content in the security strategy table includes at least one of the following: address information of the intelligent recorder associated with the substation, port information of the intelligent recorder, management address of the vertical encryption authentication device, virtual LAN information of the switch and port number of the switch, and address information of the security master station.

[0019] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the above-mentioned configuration methods based on the intelligent recorder by executing the executable instructions.

[0020] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, which stores a computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the above-mentioned configuration methods based on the intelligent recorder.

[0021] In the present invention, the operation plan sent by the power grid management platform is received through the target server, wherein the target server includes: a server of the network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, operation tasks, and the network security remote operation and maintenance main station is used to remotely operate and manage the equipment in the power system; obtain the security strategy table associated with the operation plan in the target server, wherein the security strategy table is used to record the configuration information associated with the substation; based on the security strategy table, generate a recorder configuration table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder, port information of the intelligent recorder. This solves the technical problem of low efficiency in the field configuration of the intelligent recorder when the intelligent recorder is connected to the security main station in the related technology. In the present invention, an operation plan is sent through the power grid management platform, and a security policy table in the server of the network security remote operation and maintenance main station is used to generate a recorder configuration table to configure the intelligent recorder, thereby achieving the purpose of automatic configuration of the intelligent recorder and avoiding the low efficiency of manual on-site configuration of the intelligent recorder in related technologies, thereby achieving the technical effect of improving the configuration efficiency of the intelligent recorder. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0023] Figure 1 is a flow chart of an optional configuration method based on an intelligent recorder according to an embodiment of the present invention;

[0024] Figure 2 is a processing flow chart of an optional configuration system based on an intelligent recorder according to an embodiment of the present invention;

[0025] Figure 3 is a schematic diagram of an optional configuration device based on an intelligent recorder according to an embodiment of the present invention;

[0026] Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] It should be noted that the user information (including but not limited to user device information, user personal information, etc.), collected information and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0030] For the convenience of description, some terms or nouns involved in this application are explained below.

[0031] Network security strategy: a series of preventive measures taken to protect network systems and data security, aimed at preventing malicious attacks and sabotage by intruders, protecting the confidentiality and integrity of important information in the power dispatching data network during storage and transmission, and controlling the interconnection and mutual access between access systems through security policy configuration to achieve secure access of business systems to the dispatching data network.

[0032] Electric power dispatching data network: a dedicated wide-area data network serving electric power dispatching production. It is the infrastructure for real-time and quasi-real-time data communications such as computer monitoring systems between electric power dispatching production departments and between electric power dispatching production departments and power plants and substations.

[0033] Power system: It can be divided into production area and management information area. The production control area is divided into control area (safety area I) and non-control area (safety area II), and the management information area is divided into production management area (safety area III) and management information area (safety area IV). Different safety areas have different safety protection requirements, among which safety area I has the highest safety level, safety area II is the second, and the rest of the safety areas are similar.

[0034] Safety Zone I: It is the real-time control area of ​​the power system. Any system with real-time monitoring function or the monitoring function part thereof belongs to Safety Zone I.

[0035] Safety Zone II: It is the non-controlled production area of ​​the power system. In principle, production business and wholesale trading business systems that do not have control functions belong to Safety Zone II.

[0036] Safety Zone III: The production management area of ​​the power system. The systems in this area are for production management.

[0037] Security Zone IV: Deployment of management information systems and office automation systems.

[0038] Embodiment 1

[0039] According to an embodiment of the present invention, an optional method embodiment of a configuration method based on an intelligent recorder is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0040] Figure 1 is a flow chart of an optional configuration method based on an intelligent recorder according to an embodiment of the present invention, such as Figure 1 As shown, the method comprises the following steps:

[0041] Step S101, receiving the operation plan sent by the power grid management platform through the target server, wherein the target server includes: the server of the network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management of equipment in the power system.

[0042] The above-mentioned target server can be a server of the network security remote operation and maintenance main station, for example, the Web (website) server of the network security remote operation and maintenance main station. The above-mentioned power grid management platform can include: a software platform for managing the power system. The power grid management platform can integrate multiple functions, including: visual monitoring, data analysis, event management and fault diagnosis, etc. Through the power grid management platform, the power company can monitor and manage the power system. The above-mentioned network security remote operation and maintenance main station can remotely operate and manage the equipment in the power system to maintain the network security of the power system. The above-mentioned operation plan can include: operation time, substation information, and operation tasks.

[0043] Step S102, obtaining a security policy table associated with the operation plan in the target server, wherein the security policy table is used to record configuration information associated with the substation.

[0044] The above-mentioned target server is connected to the power grid management platform through the network. The power grid management platform can send the operation plan to the target server. After the target server receives the operation plan, it can obtain the security policy table preset in the target server according to the substation information in the operation plan. The security policy table can record the configuration information associated with the substation.

[0045] For example, the security strategy table may include the IP address (Internet Protocol Address) of the intelligent recorder of the substation to be configured, the port number, the subnet mask, the gateway, the management address of the longitudinal encryption authentication device of zone I within the station, the VLAN (Wireless Local Area Network) and port number of the security switch divided by the intelligent recording device, the IP of the ground survey security master station and other information.

[0046] Step S103, based on the security strategy table, generate a recorder configuration table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder and port information of the intelligent recorder.

[0047] In this embodiment, the configuration information of the intelligent recorder can be determined based on the information recorded in the security policy table. For example, the address information of the intelligent recorder, the port information of the intelligent recorder, etc. can be extracted from the security policy table to obtain the recorder configuration table. Then the recorder configuration table can be sent to the intelligent recorder to configure the intelligent recorder, avoiding the manual on-site configuration of the intelligent recorder in the related technology, which has low configuration efficiency and is prone to errors.

[0048] Through the above steps, in this embodiment, the operation plan is sent through the power grid management platform, and the security strategy table in the server of the network security remote operation and maintenance main station is used to generate a recorder configuration table to configure the intelligent recorder, thereby achieving the purpose of automatic configuration of the intelligent recorder, avoiding the low efficiency of manual on-site configuration of the intelligent recorder in the related technology, thereby achieving the technical effect of improving the configuration efficiency of the intelligent recorder. In addition, the technical problem of low efficiency in the on-site manual configuration of the intelligent recorder in the related technology is solved when the intelligent recorder is connected to the Baoxin main station.

[0049] Optionally, the intelligent recorder is configured based on the recorder configuration table, including: encrypting the recorder configuration table to obtain an encrypted recorder configuration table; using the power dispatching data network of the power system to send the encrypted recorder configuration table to the intelligent recorder to configure the address and port of the intelligent recorder.

[0050] In this embodiment, in order to ensure the security of the data, an encryption algorithm can also be used to encrypt the data in the recorder configuration table to obtain an encrypted recorder configuration table, and then the encrypted recorder configuration table is sent to the intelligent recorder through the power dispatching data network of the power system to configure the address and port of the intelligent recorder.

[0051] For example, the network security remote operation and maintenance main station can automatically generate the master station encryption device configuration table, the plant station encryption device configuration table, the switch configuration table, and the intelligent recorder configuration table (corresponding to the recorder configuration table) according to the secondary security policy table (corresponding to the security policy table). Then, the Baoxin main station can be used to send the master station encryption device configuration table to the master station end zone I longitudinal encryption device to implement the master station encryption policy configuration. The Baoxin main station sends the plant station encryption device configuration table through the dispatching data network to the plant station end zone I longitudinal encryption device to implement the plant station encryption policy configuration. The Baoxin main station can send the switch configuration table through the dispatching data network and the station longitudinal encryption to the zone I real-time switch to implement the switch VLAN and port configuration. After that, the Baoxin main station can send the intelligent recorder configuration table through the dispatching data network, the station longitudinal encryption, and the plant station zone I real-time switch to reach the intelligent recorder device to implement the IP configuration of the intelligent recorder.

[0052] Optionally, based on the security policy table, a recorder configuration table is generated, including: sending the security policy table to the network security remote operation and maintenance master station, wherein the network security remote operation and maintenance master station is deployed in the safety zone I of the power system; based on the security policy table, using the network security remote operation and maintenance master station to generate a recorder configuration table.

[0053] In this embodiment, the target server can be deployed in the safety zone III of the power system, and the network security remote operation and maintenance main station can be deployed in the safety zone I of the power system. The security policy table in the target server can be sent from the safety zone III to the network security remote operation and maintenance main station through the forward / reverse isolation device. The network security remote operation and maintenance main station can extract the configuration information of the intelligent recorder from the security policy table to generate a recorder configuration table, thereby achieving the technical effect of automatically generating the configuration information of the intelligent recorder.

[0054] Optionally, after obtaining the security policy table associated with the job plan in the target server, it also includes: configuring the master station end encryption device configuration table, the plant station end encryption device configuration table and the switch configuration table based on the security policy table, wherein the master station end encryption device configuration table is used to configure the encryption machine of the master station in the safety zone I in the power system, the plant station end encryption device configuration table is used to configure the parameters of the encryption machine in the plant station in the safety zone I, and the switch configuration table is used to configure the parameters of the switch in the safety zone I.

[0055] The security strategy table may include the intelligent recorder IP address, port number, subnet mask, gateway, management address of the vertical encryption authentication device in zone I within the station, VLAN and port number of the security switch divided by the intelligent recording device, IP address of the ground survey and security master station, source port range, destination port, license agreement and other configuration information of the substation to be configured.

[0056] The network security remote operation and maintenance main station can automatically generate the main station encryption device configuration table, the plant station encryption device configuration table, the switch configuration table, and the intelligent recorder configuration table according to the configuration information in the security strategy table. Among them, the main station encryption device configuration table includes the IP of the longitudinal encryption authentication device in zone I of the station (establishing a tunnel), the IP of the ground survey and security signal main station (source address range), the IP address of the intelligent recorder (destination address range), the source port range, the destination port, the license agreement and other information; the plant station encryption device configuration table includes the IP address of the intelligent recorder (source address range), the IP of the ground survey and security signal main station (destination address range), the source port range, the destination port, the license agreement and other information; the switch configuration table may include the divided VLAN number, the switch port number and other information; the intelligent recorder configuration table includes the real-time IP address of the intelligent recorder, etc., avoiding the manual on-site configuration information and low configuration efficiency in related technologies.

[0057] Optionally, the content in the security strategy table includes at least one of the following: address information of the intelligent recorder associated with the substation, port information of the intelligent recorder, management address of the vertical encryption authentication device, virtual LAN information of the switch and port number of the switch, and address information of the security master station.

[0058] For example, the security strategy table may include the IP address of the intelligent recorder to be configured in the substation (corresponding to the address information of the intelligent recorder), the port number (corresponding to the port information of the intelligent recorder), the subnet mask, the gateway, the management address of the vertical encryption authentication device in zone I within the station (corresponding to the management address of the vertical encryption authentication device), the VLAN of the security switch divided by the intelligent recording device (corresponding to the virtual LAN information of the switch) and the port number (corresponding to the port number of the switch), the IP of the ground-adjusting security master station (corresponding to the address information of the security master station) and other configuration information.

[0059] In this embodiment, by opening up the interfaces between the Baoxin main station and the network security remote operation and maintenance main station, the power grid management platform, etc., according to the operation plan, the configuration file is issued at the Baoxin main station, and the network security policy configuration from the main station to the plant station of the intelligent recorder of the substation under its jurisdiction is automatically realized, that is, according to the operation plan, the network security equipment configuration file is formed at the network security remote operation and maintenance main station, and the master station encryption device configuration table, the plant station encryption device configuration table, the switch configuration table, and the intelligent recorder configuration table are gradually issued to realize the automatic configuration of the network security policy at the Baoxin main station, reduce the operation time of the main plant station personnel, and thus improve the efficiency and accuracy of the intelligent recorder access to the Baoxin main station. In addition, through this embodiment, in the face of the expansion of the scale of the power grid, it can effectively reduce the workload of the main plant station operation and maintenance personnel in the network security policy configuration, and achieve the purpose of efficiently, quickly and conveniently realizing the access to the intelligent recorder of the substation under its jurisdiction.

[0060] Embodiment 2

[0061] The second embodiment of the present invention provides an optional configuration system for an intelligent recorder, and the configuration system can be used to execute the configuration method based on the intelligent recorder provided in the first embodiment of the present invention.

[0062] Embodiment 2 of the present invention provides an optional configuration system based on an intelligent recorder, including: a power grid management platform, which is used to write an operation plan and send the operation plan to a target server, wherein the target server includes: a server of a network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management of equipment in the power system; a target server, which is used to receive the operation plan sent by the power grid management platform, and obtain the security policy table associated with the operation plan in the target server, wherein the security policy table is used to record configuration information associated with the substation; the network security remote operation and maintenance main station, which is used to generate a recorder configuration table based on the security policy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table records: the address information of the intelligent recorder and the port information of the intelligent recorder.

[0063] Figure 2 is a processing flow chart of an optional configuration system based on an intelligent recorder according to an embodiment of the present invention, such as Figure 2 As shown, the Baoxin main station is deployed in safety zone I, and can be connected to the Baoxin substation through the dispatching data network to collect data sent by protection devices, intelligent recorders, etc. in real time; it is connected to the web server of the network security remote operation and maintenance main station (corresponding to the target server) through the network security remote operation and maintenance main station and the forward / reverse isolation device. The network security remote operation and maintenance main station can receive the secondary security policy table (corresponding to the security policy table) in the web server of the network security remote operation and maintenance main station.

[0064] The web server of the network security remote operation and maintenance main station can be deployed in the security zone III, connected to the power grid management platform, and receive the operation tasks issued by the power grid management platform;

[0065] The power grid management platform is deployed in safety zone IV, and the production management system can be used to publish operation plans.

[0066] The intelligent recorder is deployed on the substation side to realize functions such as information collection, forwarding, and control of protection devices, recorders and other equipment.

[0067] The network security remote operation and maintenance master station is deployed in Security Zone I and is used to generate and publish the secondary security strategy table of the substation.

[0068] It should be noted that a firewall can also be deployed between the network security remote operation and maintenance main station (zone I) and the security main station (zone I).

[0069] It should be noted that the safety zone II of the power system may not be a major component of the configuration system based on the intelligent recorder in this embodiment. Figure 2 The safety II zone may not be included.

[0070] Optionally, the network security remote operation and maintenance master station is deployed in the safety zone I of the power system, the target server is deployed in the safety zone III of the power system, and the power grid management platform is deployed in the safety zone IV of the power system.

[0071] Optionally, the configuration system based on the intelligent recorder also includes: an encryption machine and a forward and reverse isolation device, the forward and reverse isolation device is deployed in the security zone I, and the forward and reverse isolation device is connected to the target server and the network security remote operation and maintenance main station.

[0072] Combine the following Figure 2 The processing flow of the configuration system based on the intelligent recorder is described as follows:

[0073] Step 1: The operation and maintenance personnel of the Baoxin master station publish the operation plan on the power grid management platform, and send the operation plan to the web server of the network security remote operation and maintenance master station (corresponding to the target server) through the office network;

[0074] The operation plan includes operation time, substation, and operation tasks, such as "On July 1, 2024, the 110kVXX station will be equipped with an intelligent recording secondary security strategy";

[0075] Step 2: The web server of the network security remote operation and maintenance main station calls the secondary security strategy table (corresponding to the security strategy table) of the substation to be configured according to the operation plan. The strategy table may include but is not limited to: the IP address, port number, subnet mask, gateway, management address of the vertical encryption authentication device in zone I of the substation to be configured, VLAN and port number of the switch divided by the intelligent recording device, IP of the ground adjustment security master station and other configuration information, and sends the secondary security strategy table to the network security remote operation and maintenance main station (zone I) through the forward / reverse isolation device;

[0076] Step 3: After the network security remote operation and maintenance main station (Zone I) receives the secondary security policy table, the operation and maintenance personnel can click the network security policy configuration command;

[0077] Step 4: The network security remote operation and maintenance master station (Zone I) automatically generates the master station encryption device configuration table, the plant station encryption device configuration table, the switch configuration table, and the intelligent recorder configuration table according to the secondary security strategy table;

[0078] The master station encryption device configuration table includes the IP of the longitudinal encryption authentication device in zone I of the station (to establish a tunnel), the IP of the ground survey and security master station (source address range), the IP address of the intelligent recorder (destination address range), the source port range, the destination port, the license agreement and other information;

[0079] The configuration table of the encryption device at the plant end includes the IP address of the intelligent recorder (source address range), the IP address of the ground survey and security main station (destination address range), the source port range, the destination port, the license agreement and other information;

[0080] The switch configuration table includes information such as the divided VLAN number, switch port number, etc.

[0081] The intelligent recorder configuration table includes the real-time IP address of the intelligent recorder, etc.

[0082] Step 5: The encryption device configuration table of the master station is sent to the vertical encryption device of zone I of the master station through the Baoxin master station (zone I) to implement the encryption policy configuration of the master station;

[0083] Step 6: The Baoxin master station sends the plant encryption device configuration table to the plant I zone longitudinal encryption device via the dispatching data network to implement the plant encryption strategy configuration;

[0084] Step 7: The Baoxin master station sends the switch configuration table, which is sent to the real-time switch in zone I through the dispatching data network and the vertical encryption in the station to realize the configuration of switch VLAN and port;

[0085] Step 8: The Baoxin master station sends the intelligent recorder configuration table, which reaches the intelligent recorder device through the dispatching data network, vertical encryption within the station, and the real-time switch in zone I to realize the IP configuration of the intelligent recorder.

[0086] In this embodiment, by opening up the interfaces between the Baoxin main station and the network security remote operation and maintenance main station, the power grid management platform, etc., according to the operation plan, the configuration file is issued at the Baoxin main station, and the network security policy configuration from the main station to the plant station of the intelligent recorder of the substation under its jurisdiction is automatically realized, that is, according to the operation plan, the network security equipment configuration file is formed at the network security remote operation and maintenance main station, and the master station encryption device configuration table, the plant station encryption device configuration table, the switch configuration table, and the intelligent recorder configuration table are gradually issued to realize the automatic configuration of the network security policy at the Baoxin main station, reduce the operation time of the main plant station personnel, and thus improve the efficiency and accuracy of the intelligent recorder access to the Baoxin main station. In addition, through this embodiment, in the face of the expansion of the scale of the power grid, it can effectively reduce the workload of the main plant station operation and maintenance personnel in the network security policy configuration, and achieve the purpose of efficiently, quickly and conveniently realizing the access to the intelligent recorder of the substation under its jurisdiction.

[0087] Embodiment 3

[0088] Embodiment 3 of the present invention provides an optional configuration device based on an intelligent recorder, and each implementation unit in the configuration device corresponds to each implementation step in Embodiment 1.

[0089] Figure 3 is a schematic diagram of an optional configuration device based on an intelligent recorder according to an embodiment of the present invention, such as Figure 3 As shown, it includes: a receiving unit 31, an acquiring unit 32 and a processing unit 33.

[0090] The receiving unit 31 is used to receive the operation plan sent by the power grid management platform through the target server, wherein the target server includes: a server of the network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management of equipment in the power system;

[0091] An acquisition unit 32 is used to acquire a security strategy table associated with the operation plan in the target server, wherein the security strategy table is used to record configuration information associated with the substation;

[0092] The processing unit 33 is used to generate a recorder configuration table based on the security strategy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder and port information of the intelligent recorder.

[0093] In the configuration device based on the intelligent recorder provided in the third embodiment of the present invention, the receiving unit 31 receives the operation plan sent by the power grid management platform through the target server, wherein the target server includes: the server of the network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, operation tasks, and the network security remote operation and maintenance main station is used to remotely operate and manage the equipment in the power system; the security strategy table associated with the operation plan in the target server is obtained by the acquisition unit 32, wherein the security strategy table is used to record the configuration information associated with the substation, and the processing unit 33 generates a recorder configuration table based on the security strategy table, and configures the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: the address information of the intelligent recorder and the port information of the intelligent recorder. This solves the technical problem of low efficiency in the field configuration of the intelligent recorder when the intelligent recorder is connected to the security main station in the related technology. In this embodiment, an operation plan is sent through the power grid management platform, and a recorder configuration table is generated by utilizing the security policy table in the server of the network security remote operation and maintenance main station to configure the intelligent recorder, thereby achieving the purpose of automatic configuration of the intelligent recorder and avoiding the low efficiency of manual on-site configuration of the intelligent recorder in related technologies, thereby achieving the technical effect of improving the configuration efficiency of the intelligent recorder.

[0094] Optionally, in the configuration device based on the intelligent recorder provided in Example 3 of the present invention, the processing unit includes: a processing subunit, used to encrypt the recorder configuration table to obtain an encrypted recorder configuration table; a first sending subunit, used to use the power dispatching data network of the power system to send the encrypted recorder configuration table to the intelligent recorder, so as to configure the address of the intelligent recorder and the port of the intelligent recorder.

[0095] Optionally, in the configuration device based on the intelligent recorder provided in Example 3 of the present invention, the processing unit includes: a second sending sub-unit, used to send the security policy table to the network security remote operation and maintenance main station, wherein the network security remote operation and maintenance main station is deployed in the safety zone I of the power system; a generating sub-unit, used to generate a recorder configuration table based on the security policy table using the network security remote operation and maintenance main station.

[0096] Optionally, in the configuration device based on the intelligent recorder provided in Example 3 of the present invention, the configuration device based on the intelligent recorder also includes: a configuration unit, which is used to configure the master station encryption device configuration table, the plant station encryption device configuration table and the switch configuration table based on the security policy table after obtaining the security policy table associated with the job plan in the target server, wherein the master station encryption device configuration table is used to configure the encryption machine of the master station in the safety zone I in the power system, the plant station encryption device configuration table is used to perform parameter configuration of the encryption machine in the plant station in the safety zone I, and the switch configuration table is used to perform parameter configuration of the switch in the safety zone I.

[0097] Optionally, in the configuration device based on the intelligent recorder provided in Example 3 of the present invention, the content in the security strategy table includes at least one of the following: address information of the intelligent recorder associated with the substation, port information of the intelligent recorder, management address of the vertical encryption authentication device, virtual LAN information of the switch and port number of the switch, and address information of the security master station.

[0098] The above-mentioned configuration device based on the intelligent recorder may also include a processor and a memory. The above-mentioned receiving unit 31, acquisition unit 32 and processing unit 33 are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize corresponding functions.

[0099] The processor includes a kernel, which retrieves the corresponding program unit from the memory. One or more kernels can be set, and the operation plan is sent through the power grid management platform by adjusting the kernel parameters, and the security strategy table in the server of the network security remote operation and maintenance main station is used to generate a recorder configuration table to configure the intelligent recorder, thereby achieving the purpose of automatic configuration of the intelligent recorder, avoiding the low efficiency of manual on-site configuration of the intelligent recorder in the related technology, thereby achieving the technical effect of improving the configuration efficiency of the intelligent recorder.

[0100] The above-mentioned memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one storage chip.

[0101] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the above-mentioned configuration methods based on the intelligent recorder by executing the executable instructions.

[0102] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, which stores a computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the above-mentioned configuration methods based on the intelligent recorder.

[0103] Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present invention, such as Figure 4 As shown, an embodiment of the present invention provides an electronic device 40, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, any one of the above-mentioned configuration methods based on the intelligent recorder is implemented.

[0104] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0105] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0106] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0107] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0108] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0109] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0110] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A configuration method based on an intelligent recorder, characterized in that: include: Receiving the operation plan sent by the power grid management platform through the target server, wherein the target server includes: a server of the network security remote operation and maintenance main station, the operation plan includes: operation time, substation information, and operation tasks, and the network security remote operation and maintenance main station is used to perform remote operation and maintenance management of equipment in the power system; Obtaining a security strategy table associated with the operation plan in the target server, wherein the security strategy table is used to record configuration information associated with the substation; Based on the security strategy table, a recorder configuration table is generated, and the intelligent recorder is configured based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder and port information of the intelligent recorder.

2. The configuration method according to claim 1, characterized in that: Configuring the intelligent wave recorder based on the wave recorder configuration table includes: Encrypting the wave recorder configuration table to obtain an encrypted wave recorder configuration table; The encrypted recorder configuration table is sent to the intelligent recorder by using the electric power dispatching data network of the electric power system to configure the address of the intelligent recorder and the port of the intelligent recorder.

3. The configuration method according to claim 1, characterized in that: Based on the security strategy table, a recorder configuration table is generated, including: Sending the security strategy table to a network security remote operation and maintenance master station, wherein the network security remote operation and maintenance master station is deployed in the safety zone I of the power system; Based on the security strategy table, the recorder configuration table is generated using the network security remote operation and maintenance main station.

4. The configuration method according to claim 1, characterized in that: After obtaining the security strategy table associated with the job plan in the target server, the method further includes: Based on the security strategy table, the master station end encryption device configuration table, the plant station end encryption device configuration table and the switch configuration table are configured, wherein the master station end encryption device configuration table is used to configure the encryption machine of the master station in the safety zone I in the power system, the plant station end encryption device configuration table is used to configure the parameters of the encryption machine in the plant station in the safety zone I, and the switch configuration table is used to configure the parameters of the switch in the safety zone I.

5. The configuration method according to claim 4, characterized in that: The contents in the security strategy table include at least one of the following: the address information of the intelligent recorder associated with the substation, the port information of the intelligent recorder, the management address of the vertical encryption authentication device, the virtual LAN information of the switch and the port number of the switch, and the address information of the security master station.

6. A configuration system based on an intelligent recorder, characterized in that: The configuration system based on the intelligent recorder is used to execute the configuration method based on the intelligent recorder according to any one of claims 1 to 5, comprising: A power grid management platform, used for compiling an operation plan and sending the operation plan to a target server, wherein the target server includes a server of a network security remote operation and maintenance master station, the operation plan includes operation time, substation information, and operation tasks, and the network security remote operation and maintenance master station is used for remote operation and maintenance management of the equipment in the power system; A target server, used to receive the operation plan sent by the power grid management platform, and obtain a security strategy table associated with the operation plan in the target server, wherein the security strategy table is used to record configuration information associated with the substation; The network security remote operation and maintenance main station is used to generate a recorder configuration table based on the security strategy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table records: the address information of the intelligent recorder and the port information of the intelligent recorder.

7. The configuration system according to claim 6, characterized in that: The network security remote operation and maintenance main station is deployed in the safety zone I of the power system, the target server is deployed in the safety zone III of the power system, and the power grid management platform is deployed in the safety zone IV of the power system.

8. The configuration system according to claim 7, characterized in that: The configuration system based on the intelligent recorder also includes: an encryption machine and a forward and reverse isolation device, the forward and reverse isolation device is deployed in the security zone I, and the forward and reverse isolation device is connected to the target server and the network security remote operation and maintenance main station.

9. A configuration device based on an intelligent recorder, characterized in that: include: A receiving unit, configured to receive an operation plan sent by a power grid management platform through a target server, wherein the target server includes a server of a network security remote operation and maintenance master station, and the operation plan includes an operation time, information of a substation, and an operation task, and the network security remote operation and maintenance master station is used to perform remote operation and maintenance management on equipment in a power system; An acquisition unit, configured to acquire a security strategy table associated with the operation plan in the target server, wherein the security strategy table is used to record configuration information associated with the substation; The processing unit is used to generate a recorder configuration table based on the security strategy table, and configure the intelligent recorder based on the recorder configuration table, wherein the recorder configuration table includes: address information of the intelligent recorder and port information of the intelligent recorder.

10. An electronic device, characterized in that: It includes one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the configuration method based on the intelligent recorder as described in any one of claims 1 to 7.

Images