Safe and reliable power equipment operation and maintenance management and control method and screen cabinet

Abstract

The invention relates to a safe and reliable power equipment operation and maintenance management and control method and a screen cabinet, management and control equipment is connected in series between operated and maintained equipment in the screen cabinet and an external interface in the screen cabinet, and the management and control equipment defaults to keep the communication connection between the external interface and the operated and maintained equipment disconnected; during operation and maintenance, the operation and maintenance device is connected to an external interface of a screen cabinet where the operated and maintained device is located through the operation and maintenance gateway, the operation and maintenance gateway applies for the management and control device to authenticate the operation and maintenance gateway, the management and control device connects the communication connection after the authentication is passed, and the management and control device keeps the communication connection disconnected if the authentication fails. According to the invention, the problem that the operation and maintenance gateway is skipped can be prevented.

Description

Technical Field

[0001] The present invention relates to a safe and reliable power equipment operation and maintenance control method and a panel cabinet, belonging to the technical field of power equipment operation and maintenance and information security. Background Art

[0002] In the power system, a large number of protection and measurement devices, telecontrol devices, network security devices and host devices are used. These devices are generally installed in the panel cabinet, retain the external communication interface, and lock the cabinet door for protection. There is a lot of operation and maintenance work during the construction, operation and maintenance of these devices. Usually, the power company will hand over the assets to the equipment manufacturer, system integrator or third-party service provider for operation and maintenance. For the on-site operation and maintenance method, most companies adopt extensive management, only issue operation tickets and register them, and then bring the operation and maintenance personnel to the site. The operation and maintenance personnel connect the operation and maintenance equipment to the panel cabinet interface through network cables, serial ports, etc., and run the operation and maintenance program on the operation and maintenance equipment to operate the equipment being operated and maintained. This operation and maintenance method does not supervise the operation and maintenance process of the operation and maintenance personnel throughout the process, and is not aware of their intentional illegal external connections, theft of data, and unintentional virus infection. There is no monitoring and auditing of illegal operations and misoperations that occur during the operation and maintenance process, and it is impossible to locate and trace the source after an accident occurs.

[0003] In response to the above problems, the power company used the operation and maintenance gateway to strengthen the supervision of operation and maintenance. Before the operation and maintenance work begins, according to the interface type of the object being operated and maintained, the operation and maintenance gateway is connected in series between the operation and maintenance equipment and the equipment being operated and maintained using different cables. The identity authentication of the person in charge of the work is completed on the operation and maintenance gateway through account passwords, biometrics, etc.; the device authentication of the operation and maintenance terminal is completed through the USB Key method. During the operation and maintenance work, the operation and maintenance gateway parses the communication messages in real time and controls possible risk behaviors, including illegal external connections, high-risk instructions, attack behaviors, and malicious codes. At the same time, the operation and maintenance gateway records the entire process of operation and maintenance work, including operation screen images, file transfers, communication messages, risk control, and interface usage. After the operation and maintenance is completed, the operation and maintenance and audit records can be uploaded to the third-party audit log management platform. This operation and maintenance method can achieve authentication beforehand, control during the process, and audit after the event, which greatly enhances the security of operation and maintenance. However, this security guarantee is based on the fact that the operation and maintenance personnel follow the specifications and use the operation and maintenance gateway for operation and maintenance. If the operation and maintenance personnel do not follow the specifications and bypass the operation and maintenance gateway, they can still perform operation and maintenance. In this way, there is no way to control the operation and maintenance operations.

[0004] A Chinese patent document with publication number CN110636075A discloses an operation and maintenance control, operation and maintenance analysis method and device. Among them, the operation and maintenance control method includes: receiving an access request from an operation and maintenance terminal; determining the access rights of the operation and maintenance terminal; establishing a communication connection between the operation and maintenance terminal and the operated power equipment according to the access rights of the operation and maintenance terminal; obtaining the operation and maintenance data of the operation and maintenance terminal; sending the identity information and operation and maintenance data of the operation and maintenance terminal to the operation and maintenance analysis device, so that the operation and maintenance analysis device determines the abnormal operation and maintenance information of the operation and maintenance terminal. By sending the acquired operation and maintenance data of the operation and maintenance terminal to the operation and maintenance analysis device to analyze the abnormal operation and maintenance information of the operation and maintenance terminal to determine the illegal user, illegal users are prevented from performing operation and maintenance work on the operation and maintenance terminal, and the safety of the operation and maintenance work of the power equipment is improved. The security detection in this method is equivalent to connecting an operation and maintenance gateway in series between the operation and maintenance equipment and the operated and maintained equipment, and authenticating the identity of the operation and maintenance personnel (or operation and maintenance terminal) and analyzing the operation and maintenance data through the operation and maintenance gateway. When the operation and maintenance personnel skip the operation and maintenance gateway (skip the relevant authentication process) to perform operation and maintenance, they cannot control the operation and maintenance operations. Summary of the invention

[0005] The purpose of the present invention is to provide a safe and reliable power equipment operation and maintenance control method and panel cabinet, so as to solve the problem that when operating and maintaining power equipment, it is impossible to control the operation and maintenance operations that skip the operation and maintenance gateway or related authentication processes.

[0006] To achieve the above object, the solution of the present invention includes: A safe and reliable power equipment operation and maintenance control method of the present invention includes the following steps: a control device is connected in series between the operated device in a panel cabinet and an external interface in the panel cabinet, and the control device keeps the communication connection between the external interface and the operated device disconnected by default; during operation and maintenance, the operation and maintenance device is connected to the external interface of the panel cabinet where the operated device is located through an operation and maintenance gateway and after being authenticated by the operation and maintenance gateway, the operation and maintenance gateway applies to the control device for authentication of the operation and maintenance gateway. After the authentication is passed, the control device connects the communication connection. If the authentication fails, the control device keeps the communication connection disconnected.

[0007] Furthermore, the management and control equipment includes a control module and a switch module that communicate with the operation and maintenance gateway through an external interface. The switch of the switch module is disconnected by default, and the opening and closing of the switch of the switch module is controlled by the control module; the switch is connected in series on the communication line between the external interface and the operated and maintained equipment.

[0008] Furthermore, the authentication includes the following steps: a CA certificate is built into the control module of the control device; an authentication certificate is issued to the operation and maintenance gateway; the operation and maintenance gateway sends an authentication request message including the content of the authentication certificate to the control device; the control device uses the built-in CA certificate to verify the legitimacy of the authentication certificate, and does not take any action if the verification fails, and returns an authentication request response message with a random number as the content if the verification succeeds; the operation and maintenance gateway uses a private key to sign the random number and sends it to the control device; the control device uses the authentication certificate to verify the legitimacy of the random number signature, and closes the switch of the switch module if the verification passes.

[0009] Furthermore, the control module detects the operation and maintenance data in the communication line, and if it is idle for a long time, the switch of the switch module is turned off to disconnect the communication line, and the operation and maintenance gateway is notified.

[0010] Furthermore, after the operation and maintenance gateway is authenticated by the control device, when the operation and maintenance device is directly connected to the external interface of the panel cabinet where the operated and maintained device is located, there is a record of starting operation and maintenance in the operation and maintenance gateway but there is no operation and maintenance content or the operation and maintenance content is missing.

[0011] A safe and reliable power equipment operation and maintenance panel cabinet of the present invention includes a control device connected in series between the operated equipment in the panel cabinet and the external interface in the panel cabinet, and the control device keeps the communication connection between the external interface and the operated equipment disconnected by default; the control device is used to authenticate the operation and maintenance gateway connected to the external interface, and the communication connection is connected if the authentication is passed, and the communication connection is kept disconnected if the authentication fails.

[0012] Furthermore, the management and control equipment includes a control module and a switch module that communicate with the operation and maintenance gateway through an external interface. The switch of the switch module is disconnected by default, and the opening and closing of the switch of the switch module is controlled by the control module; the switch is connected in series on the communication line between the external interface and the operated and maintained equipment.

[0013] Furthermore, a CA certificate is built into the control device; the control device uses the built-in CA certificate to verify the legitimacy of the authentication certificate of the operation and maintenance gateway. If the verification fails, no processing is performed. If the verification succeeds, an authentication request response message with a random number as the content is returned; the control device uses the authentication certificate to verify the legitimacy of the signature of the signed random number sent by the operation and maintenance gateway. If the verification passes, the switch of the switch module is closed.

[0014] Furthermore, the control module is used to detect the operation and maintenance data in the communication line. If it is idle for a long time, the switch of the switch module is turned off to disconnect the communication line, and the operation and maintenance gateway is notified.

[0015] Furthermore, after the operation and maintenance gateway is authenticated by the control device, when the operation and maintenance device is directly connected to the external interface of the panel cabinet where the operated and maintained device is located, there is a record of starting operation and maintenance in the operation and maintenance gateway but there is no operation and maintenance content or the operation and maintenance content is missing.

[0016] The beneficial effects of the present invention are: The present invention is a pioneering invention. The present invention connects a control device in series in the screen cabinet where the operated and maintained equipment is installed. The control device is connected in series between the operated and maintained equipment in the screen cabinet and the external interface. By default, data is prohibited from passing. When the operation and maintenance is started, the control device performs identity authentication on the operation and maintenance gateway. After the authentication is passed, the data channel between the operated and maintained equipment and the operation and maintenance equipment is opened, and the operation and maintenance equipment can operate and maintain the operated and maintained equipment; if the operation and maintenance gateway is skipped, the control device fails to complete the authentication of the operation and maintenance gateway, the data channel will be in a closed state, and the operation and maintenance cannot be performed, thereby preventing the problem of the operation and maintenance gateway being skipped. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram of the conventional power equipment operation and maintenance method; Figure 2 This is a schematic diagram of the operation and maintenance method using the operation and maintenance gateway; Figure 3 It is a schematic diagram of the operation and maintenance method using the control equipment; Figure 4 It is the schematic diagram of the control equipment; Figure 5 This is a schematic diagram of the control method that skips the operation and maintenance gateway; Figure 6 This is the authentication flow chart of the operation and maintenance gateway. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments.

[0019] When operating and maintaining power equipment, the original conventional operation and maintenance methods are as follows: Figure 1 As shown in the figure, the operation and maintenance personnel connect the operation and maintenance equipment to the panel cabinet interface through network cables, serial ports, etc., and run the operation and maintenance program on the operation and maintenance equipment to perform operation and maintenance operations on the equipment being operated and maintained. This operation and maintenance method does not supervise the operation and maintenance process of the operation and maintenance personnel throughout the entire process, and is unaware of their intentional illegal external connections, theft of data, and unintentional virus infections. There is no monitoring or auditing of illegal operations and misoperations that occur during the operation and maintenance process, and it is impossible to locate and track the source after an accident occurs. In response to the above problems, the power company used an operation and maintenance gateway to strengthen supervision of operation and maintenance, and the deployment method is as follows: Figure 2 As shown, by connecting an operation and maintenance gateway in series between the operation and maintenance equipment and the equipment being operated and maintained (i.e., power equipment), it is possible to achieve prior authentication, in-process control, and post-event auditing. However, if the operation and maintenance personnel do not operate according to the specifications and bypass the operation and maintenance gateway, they can still perform operation and maintenance. In this way, there is no way to control the operation and maintenance operations.

[0020] The concept of the present invention is that Figure 3 As shown, a control device is connected in series in the panel cabinet where the operated and maintained equipment is installed. The control device prohibits data from passing by default. When the operation and maintenance is started, the control device authenticates the operation and maintenance gateway. After the authentication is passed, the data channel is opened, and the operation and maintenance device can operate and maintain the operated and maintained equipment; if the operation and maintenance gateway is skipped, the control device has not completed the authentication of the operation and maintenance gateway, the data channel will be in a closed state, and the operation and maintenance cannot be carried out, thereby preventing the problem of the operation and maintenance gateway being skipped.

[0021] Method Example: This embodiment provides a safe and reliable power equipment operation and maintenance control method. Figure 3 As shown in the figure, it is an operation and maintenance method using a control device. The control device in this method is installed in the panel cabinet where the power equipment or device being operated and maintained is located, and supports network, serial port and other communication methods. The control device has a built-in control module and a switch module, and its working principle is as follows Figure 4 As shown, the switch module is responsible for managing the opening and closing of the communication channel (i.e., the communication connection between the operated and maintained equipment in the panel cabinet and the external interface), and the control module is responsible for controlling the switch module. The switch in the switch module is disconnected by default, and the switch is connected in series on the communication line between the external interface and the operated and maintained equipment. When the operation and maintenance gateway passes the authentication, the switch in the switch module is closed, and the operation and maintenance channel is opened.

[0022] The operation and maintenance process is as follows: (1) Preparation 1) The control equipment is installed in the cabinet and connected in series between the external interface of the cabinet and the equipment being operated and maintained. The control equipment has a built-in CA (Certificate Authority) certificate; 2) Issue an authentication certificate to each operation and maintenance gateway, with the root certificate being the CA certificate; 3) When starting operation and maintenance, connect the operation and maintenance gateway in series between the interface of the operation and maintenance equipment and the panel cabinet.

[0023] (2) Operation and maintenance process 1) When starting operation and maintenance on the operation and maintenance gateway, the operation and maintenance gateway will confirm the user name and password. It can only be started after confirming that the authority is possessed. At the same time, the operation and maintenance gateway will authenticate the UKEY of the operation and maintenance equipment. After the double authentication of the personnel and the operation and maintenance equipment is passed, the operation and maintenance gateway applies to the control device for identity authentication. After the authentication is passed, the control device closes the switch of the switch module and opens the operation and maintenance channel, that is, the communication connection between the external interface in the panel cabinet and the operated and maintained equipment is connected; if the authentication fails, the switch of the switch module remains disconnected and the operation and maintenance channel remains closed, that is, the communication connection between the external interface in the panel cabinet and the operated and maintained equipment remains disconnected; Among them, when performing identity authentication, the authentication data exchange can reuse the operation and maintenance channel. When using network operation and maintenance, the original socket is used for data exchange. When using serial port operation and maintenance, the serial port is directly used for data exchange. During operation and maintenance, no additional configuration of the control equipment is required, which is transparent to the operation and maintenance personnel. If it is KVM operation and maintenance, the network or serial port can be used for authentication. The authentication process is as follows Figure 6 As shown, the steps are as follows: a. The operation and maintenance gateway sends an authentication request message, and the data content is the operation and maintenance gateway certificate content b. The control device uses the built-in CA certificate to verify the legitimacy of the authentication certificate of the operation and maintenance gateway. If the verification fails, no processing is performed. If the verification succeeds, an authentication request response message is returned, and the content is a random number. c. The operation and maintenance gateway uses the private key to sign the random number sent by the control device and sends it to the control device. d. The control device uses the authentication certificate of the operation and maintenance gateway to verify the legitimacy of the random number signature of the operation and maintenance gateway. If the authentication is successful, the switch of the switch module is closed and the authentication result message is returned. 2) During the operation and maintenance process, the control module of the management and control equipment detects the operation and maintenance data in the communication line. If it is idle for a long time, the switch of the switch module is disconnected, the communication line is disconnected, the operation and maintenance channel is closed, and the operation and maintenance gateway is notified; 3) Stop operation and maintenance on the operation and maintenance gateway. The operation and maintenance gateway sends a stop operation and maintenance message. After receiving the message, the control module disconnects the switch module and the operation and maintenance channel is closed.

[0024] In this operation and maintenance control method, when the operation and maintenance gateway is not used for operation and maintenance, the operation and maintenance gateway is no longer connected or Figure 5 If you connect the operation and maintenance equipment and the operation and maintenance gateway to the external interface of the operation and maintenance cabinet at the same time, the operation and maintenance will be prohibited because the control equipment is in the closed state. When using the operation and maintenance gateway, press Figure 4 After passing the authentication of the control device, if you connect the operation and maintenance equipment directly to the external interface of the operation and maintenance cabinet, and try to skip the operation and maintenance gateway for operation and maintenance, as shown in Figure 5 In the case of skipping the operation and maintenance gateway in violation of the rules shown, although the operation and maintenance equipment can perform operation and maintenance at this time, the operation and maintenance gateway will have operation and maintenance startup records but no operation and maintenance content or the operation and maintenance content is missing. The operation and maintenance records include operation and maintenance start and stop, operation and maintenance equipment screen recording and message records, etc. If the operation and maintenance equipment is removed from the operation and maintenance gateway side, the screen recording records and message records will definitely be lost, so the problem of the operation and maintenance gateway being skipped can be checked during the audit.

[0025] Screen cabinet embodiment: This embodiment provides a safe and reliable power equipment operation and maintenance panel cabinet, which has been introduced clearly enough in the method embodiment and will not be repeated here.

Claims

1. A safe and reliable power equipment operation and maintenance control method, characterized in that: The following steps are involved: The control and management equipment is connected in series between the operated and maintained equipment in the panel cabinet and the external interface in the panel cabinet. The control and management equipment keeps the communication connection between the external interface and the operated and maintained equipment disconnected by default. During operation and maintenance, the operation and maintenance equipment is connected to the external interface of the panel cabinet where the operated and maintained equipment is located through the operation and maintenance gateway and after passing the authentication of the operation and maintenance gateway, the operation and maintenance gateway applies to the control and management equipment for authentication of the operation and maintenance gateway. After the authentication is passed, the control and management equipment connects the communication connection. If the authentication fails, the control and management equipment keeps the communication connection disconnected.

2. The safe and reliable power equipment operation and maintenance management method according to claim 1 is characterized in that: The management and control device includes a control module and a switch module that communicate with the operation and maintenance gateway through the external interface. The switch of the switch module is disconnected by default, and the opening and closing of the switch of the switch module are controlled by the control module; the switch is connected in series on the communication line between the external interface and the operated and maintained device.

3. The safe and reliable power equipment operation and maintenance management method according to claim 2 is characterized in that: The authentication includes the following steps: a CA certificate is built into the control module of the control device; an authentication certificate is issued to the operation and maintenance gateway; the operation and maintenance gateway sends an authentication request message including the content of the authentication certificate to the control device; the control device uses the built-in CA certificate to verify the legitimacy of the authentication certificate, and does not take any action if the verification fails. Otherwise, an authentication request response message with a random number as the content is returned if the verification succeeds; the operation and maintenance gateway uses a private key to sign the random number and sends it to the control device; the control device uses the authentication certificate to verify the legitimacy of the random number signature, and closes the switch of the switch module if the verification passes.

4. The safe and reliable power equipment operation and maintenance management method according to claim 2 is characterized in that: The control module detects the operation and maintenance data in the communication line, and if it is idle for a long time, the switch of the switch module is turned off to disconnect the communication line, and the operation and maintenance gateway is notified.

5. The safe and reliable power equipment operation and maintenance management method according to claim 1 is characterized in that: When the operation and maintenance gateway is authenticated by the control device and the operation and maintenance device is directly connected to the external interface of the panel cabinet where the operated and maintenance device is located, the operation and maintenance gateway has an operation and maintenance start record but no operation and maintenance content or the operation and maintenance content is missing.

6. A safe and reliable power equipment operation and maintenance panel cabinet, characterized in that: It includes a control device connected in series between the operated and maintained equipment in the screen cabinet and the external interface in the screen cabinet, and the control device keeps the communication connection between the external interface and the operated and maintained equipment disconnected by default; the control device is used to authenticate the operation and maintenance gateway connected to the external interface, and the communication connection is connected if the authentication is passed, and the communication connection is kept disconnected if the authentication fails.

7. The safe and reliable power equipment operation and maintenance panel cabinet according to claim 6 is characterized in that: The management and control device includes a control module and a switch module that communicate with the operation and maintenance gateway through the external interface. The switch of the switch module is disconnected by default, and the opening and closing of the switch of the switch module are controlled by the control module; the switch is connected in series on the communication line between the external interface and the operated and maintained device.

8. The safe and reliable power equipment operation and maintenance panel cabinet according to claim 7 is characterized in that: The control device has a built-in CA certificate; The control device uses the built-in CA certificate to verify the legitimacy of the authentication certificate of the operation and maintenance gateway. If the verification fails, no processing is performed. If the verification succeeds, an authentication request response message with a random number as the content is returned; The control device uses the authentication certificate to verify the legitimacy of the signature of the signed random number sent by the operation and maintenance gateway, and closes the switch of the switch module if the verification is successful.

9. The safe and reliable power equipment operation and maintenance panel cabinet according to claim 7 is characterized in that: The control module is used to detect the operation and maintenance data in the communication line. If it is idle for a long time, the switch of the switch module is turned off to disconnect the communication line, and the operation and maintenance gateway is notified.

10. The safe and reliable power equipment operation and maintenance panel cabinet according to claim 6 is characterized in that: When the operation and maintenance gateway is authenticated by the control device and the operation and maintenance device is directly connected to the external interface of the panel cabinet where the operated and maintenance device is located, the operation and maintenance gateway has an operation and maintenance start record but no operation and maintenance content or the operation and maintenance content is missing.

Images