Distribution network automation system service message interaction system, downlink method and uplink method

Abstract

The invention discloses a distribution network automation system service message interaction system, a downlink method and an uplink method, the distribution network automation system service message interaction system comprises a power distribution terminal and a master station, and the master station comprises an I area acquisition server used for acquiring channel information of the power distribution terminal and an ip address of a channel; generating and sending a downlink message with a high priority and a corresponding ip address; receiving the signed downlink message, and sending a downlink message file; sending an uplink message and a corresponding ip address according to the uplink message file; the secure access area acquisition server is used for sending the signed downlink message according to the downlink message file; obtaining an uplink message, writing the uplink message into a file, and sending an uplink message file; the digital signature device is used for signing the downlink message and the corresponding ip address and sending the signed downlink message; and receiving the uplink message and the corresponding ip address, and carrying out signature verification and legality judgment. The data security protection capability of the distribution network automation system is improved, and the correctness of the data is guaranteed.

Description

Technical Field

[0001] The invention relates to a distribution network automation system service message interaction system, downlink and uplink methods, and belongs to the technical field of distribution network automation system security protection. Background Art

[0002] The distribution network is the last link of the power system facing users, and is the link between the power grid and users. Distribution automation is the core means to improve the reliability and quality of power supply of the distribution network, expand the power supply capacity, and improve the level of operation and management of the distribution network. The on-site distribution terminals of the distribution automation system are mainly connected to the distribution master station system through optical fiber, wireless network and other communication methods. Due to the relatively weak security protection measures and the enhancement of hacker attack methods, the distribution automation system with many points and wide distribution faces the risk of network attacks from the public network or private network, which in turn affects the safe and reliable power supply of the distribution system to users.

[0003] In order to improve the security of data information communication and transmission, people have put forward more and more requirements for data information security. However, the existing distribution network automation system service message interaction system can no longer meet people's increasing requirements for data information security.

[0004] The information disclosed in this background technology section is only intended to enhance the understanding of the overall background of the invention and should not be regarded as an acknowledgement or any form of suggestion that the information constitutes the prior art already known to ordinary technicians in this field. Summary of the invention

[0005] The purpose of the present invention is to overcome the deficiencies in the prior art and provide a distribution network automation system service message interaction system, a downlink and uplink method, which improves the data security protection capability of the distribution network automation system and ensures the correctness of the data through the cooperation of the I zone collection server, the security access zone collection server and the digital signature device.

[0006] To achieve the above object, the present invention is implemented by adopting the following technical solutions: In a first aspect, the present invention discloses a distribution network automation system service message interaction system, including a distribution terminal and a master station, wherein the master station includes an I zone collection server, a secure access zone collection server and a digital signature device, The collection server in zone I is used to obtain the channel information and the IP address of the channel of the power distribution terminal; generate a downlink message according to the channel information, and based on the preset downlink priority list, preferentially send the downlink message with a high priority and the corresponding channel IP address to the digital signature device; receive the signed downlink message and write it into a file, obtain the downlink message file and send it to the collection server in the secure access zone; receive the uplink message file and parse it, obtain the uplink message and the corresponding channel IP address and send them to the digital signature device together; The secure access zone collection server is used to parse the downlink message file, obtain the signed downlink message and send it to the power distribution terminal of the corresponding channel; obtain the uplink message sent by the power distribution terminal and write it into a file, obtain the uplink message file and send it to the I zone collection server; The digital signature device is used to receive the downlink message and the IP address of the corresponding channel and sign it, and send the signed downlink message to the I zone collection server; receive the uplink message and the IP address of the corresponding channel and verify the signature and judge the legitimacy.

[0007] Furthermore, the downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages.

[0008] Furthermore, the same power distribution terminal corresponds to multiple downstream channels, one downstream channel contains multiple different types of downstream protocol messages, different downstream channels of the same power distribution terminal correspond to different priorities, and different types of downstream messages of the same downstream channel correspond to different priorities; The priority selection rules of the downlink priority list include: In response to downlink messages of different downlink channels, preferentially selecting a downlink message corresponding to a downlink channel with a higher priority; In response to different types of downlink messages on the same downlink channel, a downlink message with a higher priority is preferably selected.

[0009] Furthermore, the uplink messages include uplink system command messages, uplink telesignaling messages, uplink telemetry messages, uplink remote control messages, uplink remote adjustment messages, uplink setting point messages and uplink system synchronization messages.

[0010] Furthermore, the digital signature device is also used to: In response to the failure of the signature verification of the uplink message, or when it is judged that the uplink message is illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

[0011] In a second aspect, the present invention discloses a method for downlinking service messages of a distribution network automation system, comprising the following steps: Based on the I zone acquisition server, the channel information and the IP address of the distribution terminal are obtained; based on the channel information, a downlink message is generated, and based on a preset downlink priority list, a downlink message with a high priority and the corresponding channel IP address are preferentially sent to the digital signature device; Based on the digital signature device, the downlink message and the corresponding channel IP address are received and signed, and the signed downlink message is sent to the I zone collection server; Based on the I zone collection server, the signed downlink message is received and written into a file, and the downlink message file is obtained and sent to the secure access zone collection server; Based on the secure access zone collection server, the downlink message file is parsed to obtain the signed downlink message and send it to the power distribution terminal of the corresponding channel.

[0012] Furthermore, the downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages.

[0013] In a third aspect, the present invention discloses a method for uplinking service messages of a distribution network automation system, comprising the following steps: Based on the secure access zone collection server, the uplink message sent by the power distribution terminal is obtained and written into a file, and the uplink message file is sent to the I zone collection server; Based on the I zone acquisition server, the uplink message file is received and parsed, and the uplink message and the corresponding channel IP address are obtained and sent to the digital signature device; Based on the digital signature device, the uplink message and the corresponding channel IP address are received and the signature is verified and the legitimacy is determined.

[0014] Furthermore, it also includes: Based on the digital signature device, in response to the failure of the signature verification of the uplink message, or when it is judged that the uplink message is illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

[0015] Compared with the prior art, the present invention has the following beneficial effects: The distribution network automation system business message interaction system, downlink and uplink methods of the present invention, through the cooperation of the I zone collection server, the security access zone collection server and the digital signature device, the I zone collection server is connected to the distribution network master station message digital signature device, and the distribution network automation system business message is signed and verified, which increases the message legitimacy judgment, improves the security protection capability of the distribution network automation system, ensures the correctness of the data, and optimizes the distribution network automation system business message interaction process, ensures the validity of real-time data, and ensures that the distribution automation system can operate efficiently, safely and stably. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a schematic diagram of the business message interaction system of the distribution network automation system; Figure 2 It is a schematic diagram of the signature process provided by the embodiment. Implementation

[0017] The present invention will be further described below in conjunction with the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and cannot be used to limit the protection scope of the present invention. Example 1

[0018] This embodiment 1 provides a distribution network automation system service message interaction system, including a distribution terminal and a master station, the master station includes an I zone collection server, a secure access zone collection server and a digital signature device, The collection server in zone I is used to obtain the channel information and the IP address of the channel of the power distribution terminal; generate a downlink message according to the channel information, and based on the preset downlink priority list, preferentially send the downlink message with a high priority and the IP address of the corresponding channel to the digital signature device; receive the signed downlink message and write it into a file, obtain the downlink message file and send it to the collection server in the secure access zone; receive the uplink message file and parse it, obtain the uplink message and the IP address of the corresponding channel and send them to the digital signature device together; The secure access zone collection server is used to parse the downlink message file, obtain the signed downlink message and send it to the power distribution terminal of the corresponding channel; obtain the uplink message sent by the power distribution terminal and write it into a file, obtain the uplink message file and send it to the I zone collection server; The digital signature device is used to receive the downlink message and the IP address of the corresponding channel and sign it, and send the signed downlink message to the I zone collection server; receive the uplink message and the IP address of the corresponding channel and verify the signature and judge the legitimacy.

[0019] The technical concept of the present invention is: through the cooperation of the I zone collection server, the security access zone collection server and the digital signature device, the I zone collection server is connected to the distribution network master station message digital signature device, and the distribution network automation system business message is signed and verified, which increases the message legitimacy judgment, improves the security protection capability of the distribution network automation system, ensures the correctness of the data, and optimizes the distribution network automation system business message interaction process at the same time, ensures the validity of real-time data, and ensures that the distribution automation system can operate efficiently, safely and stably.

[0020] The connection method between the digital signature device and the distribution network master station and distribution network terminal is as follows Figure 1As shown, the digital signature device is connected to the acquisition server in zone I on the master station side to complete the signing and verification of protocol message data such as system commands, telesignaling messages, telemetering messages, remote control messages, remote adjustment messages, point setting messages, system timing, etc., and to ensure the legitimacy of the uplink protocol messages.

[0021] The distribution network master station contains multiple channel models. The channel model needs to establish a channel ledger in the digital signature device and set a unique ID for each channel. The unique ID is converted from the IP address of the channel. One distribution terminal corresponds to multiple channels.

[0022] The distribution network automation system service message interaction system of this embodiment includes two message transmission methods, namely, a message downlink method and a message uplink method, which are specifically as follows: 1. Message downlink method.

[0023] 1. Based on the I zone acquisition server, obtain the channel information and channel IP address of the distribution terminal; generate a downlink message based on the channel information, and based on the preset downlink priority list, give priority to sending the downlink message with high priority and the corresponding channel IP address to the digital signature device.

[0024] Specifically, the downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages.

[0025] The same power distribution terminal corresponds to multiple downstream channels. A downstream channel contains multiple different types of downstream protocol messages. Different downstream channels of the same power distribution terminal correspond to different priorities. Different types of downstream messages of the same downstream channel correspond to different priorities. The priority selection rules of the downstream priority list include: In response to downlink messages of different downlink channels, preferentially selecting a downlink message corresponding to a downlink channel with a higher priority; In response to different types of downlink messages on the same downlink channel, a downlink message with a higher priority is preferably selected.

[0026] The priorities of the downlink messages in this embodiment are arranged from high to low as follows: downlink remote control message, downlink remote adjustment message, downlink point setting message, downlink system command, and downlink system synchronization message.

[0027] In this embodiment, the message types with high downlink message priority are signed first and sent to the distribution terminal to reduce the response time of the distribution terminal to the downlink command and improve the control efficiency of the master station over the distribution network system.

[0028] The specific steps are as follows: The collection server in zone I collects multiple downlink messages, and each downlink protocol message corresponds to an IP address of a downlink channel.

[0029] When the I-zone collection server selects to sign the downlink message to be sent, it first needs to select a higher priority channel according to the priorities of multiple channels corresponding to the same power distribution terminal. After determining the channel, it needs to select a higher priority type of downlink message for signing according to the higher priority type of downlink message in the same channel, and then select a lower priority type of downlink message for signing. After the downlink message in the higher priority channel is processed, it will be signed in order according to the message type priority in the lower priority channel.

[0030] 2. Based on the digital signature device, the downlink message and the corresponding channel IP address are received and signed, and the signed downlink message is sent to the I zone collection server.

[0031] The communication method between the collection server in zone I and the digital signature device is as follows: Figure 2 As shown, the collection server in zone I sends the downlink message and IP address to be sent to the digital signature device, which adds a timestamp to the downlink message, signs the downlink message and the timestamp, and then returns the signed downlink message to the collection server in zone I. The signed downlink message includes a timestamp, a downlink message, a signature, and an IP address.

[0032] 3. Based on the collection server in zone I, the signed downlink message is received and written into a file, and the downlink message file is obtained and sent to the collection server in the secure access zone; After receiving the signed downlink message, the collection server in zone I writes the signed downlink message into the downlink protocol message E format file, obtains the downlink message file and sends it to the collection server in the full access zone.

[0033] 4. Based on the secure access area collection server, the downlink message file is parsed and the signed downlink message is sent to the power distribution terminal of the corresponding channel.

[0034] 2. Message uplink method.

[0035] 1. Based on the secure access zone collection server, obtain the uplink message sent by the distribution terminal and write it into a file, and then send the uplink message file to the I zone collection server.

[0036] Specifically, the uplink message uploaded by the distribution network terminal through the channel is received by the secure access zone collection server and written into the uplink protocol message E format file, and the obtained uplink message file is sent to the I zone collection server.

[0037] 2. Based on the I zone acquisition server, the uplink message file is received and parsed, and the uplink message and the corresponding channel IP address are obtained and sent to the digital signature device.

[0038] The uplink messages include uplink system command messages, uplink telesignaling messages, uplink telemetry messages, uplink remote control messages, uplink remote adjustment messages, uplink setting point messages and uplink system synchronization messages.

[0039] 3. Based on the digital signature device, receive the uplink message and the corresponding channel IP address and verify the signature and determine the legitimacy.

[0040] In response to the failure of the uplink message signature verification, or when the uplink message is judged to be illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

[0041] It should be noted that judging the legitimacy includes: whether the time of receiving the uplink message is within a reasonable range, whether the signature in the uplink message can be successfully verified, and whether the timestamp in the uplink message is reasonable.

[0042] At this point, the entire business message interaction process is completed. Example 2

[0043] This embodiment 2 provides a method for downlinking service messages of a distribution network automation system, including the following steps: Based on the I zone acquisition server, the channel information and the IP address of the distribution terminal are obtained; based on the channel information, a downlink message is generated, and based on the preset downlink priority list, the downlink message with a high priority and the corresponding channel IP address are preferentially sent to the digital signature device; Based on the digital signature device, the downlink message and the corresponding channel IP address are received and signed, and the signed downlink message is sent to the I zone collection server; Based on the I zone collection server, the signed downlink message is received and written into a file, and the downlink message file is obtained and sent to the secure access zone collection server; Based on the secure access area collection server, the downlink message file is parsed and the signed downlink message is sent to the power distribution terminal of the corresponding channel.

[0044] Furthermore, the downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages. Example 3

[0045] This embodiment 3 provides a method for uplinking service messages of a distribution network automation system, including the following steps: Based on the secure access zone collection server, the uplink message sent by the power distribution terminal is obtained and written into a file, and the uplink message file is sent to the I zone collection server; Based on the I zone acquisition server, the uplink message file is received and parsed, and the uplink message and the corresponding channel IP address are obtained and sent to the digital signature device; Based on the digital signature device, the uplink message and the corresponding channel IP address are received and the signature is verified and the legitimacy is determined.

[0046] Furthermore, it also includes: Based on the digital signature device, in response to the failure of the uplink message signature verification, or when the uplink message is judged to be illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

[0047] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0048] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0049] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0050] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0051] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A distribution network automation system service message interaction system, characterized in that: It includes a power distribution terminal and a master station, wherein the master station includes an I zone collection server, a secure access zone collection server and a digital signature device. Zone I collection server, used to obtain the channel information and IP address of the distribution terminal; Generate a downlink message according to the channel information, and based on a preset downlink priority list, preferentially send a downlink message with a high priority and the IP address of the corresponding channel to the digital signature device; receive the signed downlink message and write it into a file, obtain the downlink message file and send it to the secure access area collection server; Receive the uplink message file and parse it, obtain the uplink message and the corresponding channel IP address and send them to the digital signature device; The secure access zone collection server is used to parse the downlink message file, obtain the signed downlink message and send it to the power distribution terminal of the corresponding channel; obtain the uplink message sent by the power distribution terminal and write it into a file, obtain the uplink message file and send it to the I zone collection server; The digital signature device is used to receive the downlink message and the IP address of the corresponding channel and sign it, and send the signed downlink message to the I zone collection server; receive the uplink message and the IP address of the corresponding channel and verify the signature and judge the legitimacy.

2. The distribution network automation system service message interaction system according to claim 1, characterized in that: The downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages.

3. The distribution network automation system service message interaction system according to claim 2, characterized in that: The same power distribution terminal corresponds to multiple downstream channels. A downstream channel contains multiple different types of downstream protocol messages. Different downstream channels of the same power distribution terminal correspond to different priorities. Different types of downstream messages of the same downstream channel correspond to different priorities. The priority selection rules of the downlink priority list include: In response to downlink messages of different downlink channels, preferentially selecting a downlink message corresponding to a downlink channel with a higher priority; In response to different types of downlink messages on the same downlink channel, a downlink message with a higher priority is preferably selected.

4. The distribution network automation system service message interaction system according to claim 1, characterized in that: The uplink messages include uplink system command messages, uplink telesignaling messages, uplink telemetry messages, uplink remote control messages, uplink remote adjustment messages, uplink point setting messages and uplink system synchronization messages.

5. The distribution network automation system service message interaction system according to claim 1, characterized in that: The digital signature device is also used to: In response to the failure of the signature verification of the uplink message, or when it is judged that the uplink message is illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

6. A method for downlinking service messages of a distribution network automation system, characterized in that: The steps include: Based on the I zone acquisition server, the channel information and the IP address of the distribution terminal are obtained; based on the channel information, a downlink message is generated, and based on a preset downlink priority list, a downlink message with a high priority and the corresponding channel IP address are preferentially sent to the digital signature device; Based on the digital signature device, the downlink message and the corresponding channel IP address are received and signed, and the signed downlink message is sent to the I zone collection server; Based on the I zone collection server, the signed downlink message is received and written into a file, and the downlink message file is obtained and sent to the secure access zone collection server; Based on the secure access zone collection server, the downlink message file is parsed to obtain the signed downlink message and send it to the power distribution terminal of the corresponding channel.

7. The method for downlinking service messages of a distribution network automation system according to claim 6, characterized in that: The downlink messages include downlink system command messages, downlink remote control messages, downlink remote adjustment messages, downlink point setting messages and downlink system synchronization messages.

8. A method for uplinking service messages of a distribution network automation system, characterized in that: The steps include: Based on the secure access zone collection server, the uplink message sent by the power distribution terminal is obtained and written into a file, and the uplink message file is sent to the I zone collection server; Based on the I zone acquisition server, the uplink message file is received and parsed, and the uplink message and the corresponding channel IP address are obtained and sent to the digital signature device; Based on the digital signature device, the uplink message and the corresponding channel IP address are received and the signature is verified and the legitimacy is determined.

9. The method for uplinking service messages of a distribution network automation system according to claim 8, characterized in that: Also includes, Based on the digital signature device, in response to the failure of the signature verification of the uplink message, or when it is judged that the uplink message is illegal, the signature verification result or the judgment result is output and sent to the corresponding distribution terminal via the I zone collection server and the security access zone collection server.

Images