Security protection system of power system information communication network

Abstract

The invention discloses a security protection system of an electric power system information communication network, belongs to the technical field of electric power system information communication, and aims to solve the problem of poor operation security and stability of an electric power system caused by poor security protection effect of an existing electric power system information communication network. The system comprises a physical layer protection module used for supervising, maintaining and replacing electric power communication equipment; the application layer protection module is used for verifying the identity recognized and accessed by the server terminal; the management layer protection module is used for supervising, maintaining, constructing and adjusting each communication network and realizing scheduling by combining each power communication network; and the data security management module is used for backing up and recovering the communication data. The method is used for performing security protection on the information communication network of the power system.

Description

Technical Field

[0001] The invention relates to a safety protection system for an electric power system information communication network, belonging to the technical field of electric power system information communication. Background Art

[0002] With the advent of the information age, the power system information communication network has become an important part of the power system. Due to the complexity and uncertainty of the network environment, the power system information communication network security faces many threats and challenges. Therefore, the study of power system information communication network security and protection has important practical significance and theoretical value.

[0003] The security protection of power system information and communication network has very important characteristics:

[0004] 1. Modern power systems are highly dependent on information and communication networks for power dispatching, control and monitoring. Once the network is attacked or destroyed, it may cause power supply interruption, affecting social production and people's lives. Through effective security protection measures, various network threats can be prevented and responded to, ensuring the continuity and reliability of power supply.

[0005] 2. As a critical infrastructure, the power system is one of the main targets of cyber attackers. Attackers may exploit network vulnerabilities or malware to launch attacks to steal information, destroy systems, or carry out other malicious acts. The power system involves a large amount of important data, and the leakage or damage of this data may cause serious economic losses. By strengthening data security protection, the confidentiality, integrity and availability of data can be ensured to prevent data leakage and damage.

[0006] 3. With the continuous development of information and digital technology, the operation of power systems is increasingly dependent on information and communication networks. If the security and reliability of information and communication networks cannot be guaranteed, the application effect of these technologies will be limited and the operating efficiency of power systems will be affected. At the same time, the normal operation of the network is directly related to the operating efficiency of the power system.

[0007] 4. Strengthening the security protection of information and communication networks can enhance the competitiveness and market reputation of power companies and promote the sustainable development of the power industry.

[0008] Therefore, how to achieve effective and secure protection of the power system information and communication network is a key technology for the safe and stable operation of the power system. Summary of the invention

[0009] The purpose of the present invention is to solve the problem that the existing power system information communication network has poor security protection effect, resulting in poor safety and stability of power system operation, and to provide a security protection system for the power system information communication network.

[0010] The security protection system of the power system information communication network described in the present invention comprises: a physical layer protection module, an application layer protection module, a management layer protection module and a data security management module;

[0011] The physical layer protection module is used to supervise, maintain and replace power communication equipment;

[0012] The application layer protection module is used to verify the identity of the server terminal to access;

[0013] The management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks;

[0014] The data security management module is used to back up and restore communication data.

[0015] Preferably, the management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks, specifically including:

[0016] The management layer protection module divides the network management system into a network element layer, a network layer, a service layer and a business layer;

[0017] The network element layer is used to supervise and maintain individual network element components and provide support for upper-layer networks;

[0018] The network layer is used to build and adjust the network management system using individual network element components;

[0019] The service layer is used to provide network interfaces and organizational channels for service objects of the communication network;

[0020] The business layer is used to achieve dispatching by combining various power communication networks.

[0021] Preferably, the data security management module is used to back up and restore communication data, specifically including:

[0022] The communication data is backed up in a database and cloud technology is used to back up the communication data to the cloud. The cloud data and the communication data in the database are kept synchronized;

[0023] When the communication data of the power system is missing, the cloud data is downloaded to the server of the power system information communication network.

[0024] Preferably, the database backs up the communication data, specifically including:

[0025] Database full backup, database differential backup and transaction log backup;

[0026] The complete database backup is used to rebuild all the data in the database and to regularly back up the data in the database within a defined time period;

[0027] The database differential backup is used to back up the data that has changed since the last full backup;

[0028] The transaction log backup is used to record and store all transactions that occurred after the last transaction log backup.

[0029] Preferably, the application layer protection module is used to verify the identity of the server terminal for access, specifically including:

[0030] CA identity authentication is used to verify the identity of the server terminal access.

[0031] Preferably, the CA identity specifically includes:

[0032] The certificate of each power system information communication network is signed and authorized by the CA, and the public key is placed in the certificate.

[0033] Advantages of the present invention: The security protection system of the power system information communication network described in the present invention proposes corresponding protection measures. By strengthening equipment management, improving network security awareness, establishing a multi-layer defense system and strengthening data security management, the security and stability of the power system information communication network can be effectively improved, providing a strong guarantee for the safe and stable operation of the power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a principle block diagram of the safety protection system of the power system information communication network described in the present invention. DETAILED DESCRIPTION

[0035] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0036] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0037] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but they are not intended to limit the present invention.

[0038] Embodiment 1:

[0039] Combine the following Figure 1The present embodiment is described as follows: a security protection system for an electric power system information communication network comprises: a physical layer protection module, an application layer protection module, a management layer protection module and a data security management module;

[0040] The physical layer protection module is used to supervise, maintain and replace power communication equipment;

[0041] The application layer protection module is used to verify the identity of the server terminal to access;

[0042] The management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks;

[0043] The data security management module is used to back up and restore communication data.

[0044] Furthermore, the management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks, specifically including:

[0045] The management layer protection module divides the network management system into a network element layer, a network layer, a service layer and a business layer;

[0046] The network element layer is used to supervise and maintain individual network element components and provide support for upper-layer networks;

[0047] The network layer is used to build and adjust the network management system using individual network element components;

[0048] The service layer is used to provide network interfaces and organizational channels for service objects of the communication network;

[0049] The business layer is used to achieve dispatching by combining various power communication networks.

[0050] Furthermore, the data security management module is used to back up and restore communication data, specifically including:

[0051] The communication data is backed up in a database and cloud technology is used to back up the communication data to the cloud. The cloud data and the communication data in the database are kept synchronized;

[0052] When the communication data of the power system is missing, the cloud data is downloaded to the server of the power system information communication network.

[0053] Furthermore, the database backs up the communication data, specifically including:

[0054] Database full backup, database differential backup and transaction log backup;

[0055] The complete database backup is used to rebuild all the data in the database and to regularly back up the data in the database within a defined time period;

[0056] The database differential backup is used to back up the data that has changed since the last full backup;

[0057] The transaction log backup is used to record and store all transactions that occurred after the last transaction log backup.

[0058] Furthermore, the application layer protection module is used to verify the identity of the server terminal for access, specifically including:

[0059] CA identity authentication is used to verify the identity of the server terminal access.

[0060] Furthermore, the CA identity specifically includes:

[0061] The certificate of each power system information communication network is signed and authorized by the CA, and the public key is placed in the certificate.

[0062] Although the present invention is described herein with reference to specific embodiments, it should be understood that these embodiments are merely examples of the principles and applications of the present invention. It should therefore be understood that many modifications may be made to the exemplary embodiments and that other arrangements may be devised without departing from the spirit and scope of the present invention as defined by the appended claims. It should be understood that the various dependent claims and features described herein may be combined in a manner different from that described in the original claims. It should also be understood that features described in conjunction with individual embodiments may be used in other described embodiments.

Claims

1. A security protection system for an electric power system information communication network, characterized in that: It includes: Physical layer protection module, application layer protection module, management layer protection module and data security management module; The physical layer protection module is used to supervise, maintain and replace power communication equipment; The application layer protection module is used to verify the identity of the server terminal to access; The management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks; The data security management module is used to back up and restore communication data.

2. A security protection system for an electric power system information communication network according to claim 1, characterized in that: The management layer protection module is used to supervise, maintain, build and adjust each communication network, and realize scheduling by combining various power communication networks, specifically including: The management layer protection module divides the network management system into a network element layer, a network layer, a service layer and a business layer; The network element layer is used to supervise and maintain individual network element components and provide support for upper-layer networks; The network layer is used to build and adjust the network management system using individual network element components; The service layer is used to provide network interfaces and organizational channels for service objects of the communication network; The business layer is used to achieve dispatching by combining various power communication networks.

3. A security protection system for an electric power system information communication network according to claim 1, characterized in that: The data security management module is used to back up and restore communication data, specifically including: The communication data is backed up in a database and cloud technology is used to back up the communication data to the cloud. The cloud data and the communication data in the database are kept synchronized; When the communication data of the power system is missing, the cloud data is downloaded to the server of the power system information communication network.

4. A security protection system for an electric power system information communication network according to claim 3, characterized in that: The database backs up the communication data, specifically including: Database full backup, database differential backup and transaction log backup; The complete database backup is used to rebuild all the data in the database and to regularly back up the data in the database within a defined time period; The database differential backup is used to back up the data that has changed since the last full backup; The transaction log backup is used to record and store all transactions that occurred after the last transaction log backup.

5. A security protection system for an electric power system information communication network according to claim 1, characterized in that: The application layer protection module is used to verify the identity of the server terminal to access, specifically including: CA identity authentication is used to verify the identity of the server terminal access.

6. A security protection system for an electric power system information communication network according to claim 5, characterized in that: The CA identity specifically includes: The certificate of each power system information communication network is signed and authorized by the CA, and the public key is placed in the certificate.

Images