Ice melting remote control system network security protection method and system

Abstract

The invention relates to a network security protection method and system for an ice melting remote control system. The method comprises the following steps: generating a corresponding ice melting control instruction through a production control safety area module; signing and encrypting the ice melting control instruction, and sending the encrypted instruction to the safety protection module; performing encryption and signature verification operation on the encrypted instruction through a security protection module to obtain a decrypted ice melting control instruction; executing the ice melting control instruction through an ice melting controller in the ice melting device module, and controlling an ice melting device to perform ice melting operation; the operation state and environmental parameters of the terminal equipment are monitored in real time, a sensor in the ice melting device module is triggered to monitor operation data of the ice melting device, and the operation data are uploaded to the safety protection module; performing encryption processing on the operation data through the security protection module to obtain encrypted operation data; and uploading the encrypted operation data to a production control safety area module. By adopting the method, the safety of ice melting remote control can be improved.

Description

Technical Field

[0001] The present application relates to the technical field of power system automation control, and in particular to a network security protection method and system for an ice-melting remote control system. Background Art

[0002] In cold and humid climates, the ground wires (or overhead ground wires, lightning conductors) of power lines are prone to ice and snow accumulation, which not only increases the weight of the lines, but may also cause the lines to sag, break, or even cause short circuit failures, seriously threatening the safe and stable operation of the power system. The existing method of remotely controlling ice melting devices mainly sends control instructions to the ice melting devices through the dispatching data network and network access point (APN). The entire process lacks data protection measures, resulting in a high security risk of remote control of ice melting. Summary of the invention

[0003] Based on this, it is necessary to provide a network security protection method and system for an ice-melting remote control system that can improve the security of ice-melting remote control in response to the above technical problems.

[0004] In a first aspect, the present application provides a network security protection method for an ice melting remote control system, comprising:

[0005] The production control safety zone module generates corresponding ice melting control instructions based on the real-time monitoring of snow accumulation on the ground wire of the power line;

[0006] Signing and encrypting the ice melting control instruction to obtain an encrypted instruction, and sending the encrypted instruction to the security protection module through the wireless private network module;

[0007] The encrypted instruction is encrypted and signature verified by the security protection module to obtain the decrypted ice-melting control instruction, and after confirming that the ice-melting control instruction is authentic and complete, the ice-melting control instruction is forwarded to the ice-melting device module;

[0008] The ice melting controller in the ice melting device module executes the ice melting control instruction to control the ice melting device to perform ice melting operation;

[0009] The terminal management module monitors the operating status and environmental parameters of the terminal equipment associated with the ice melting device module in real time. When an abnormality occurs in the operating status or the environmental parameters reach an alarm threshold, the sensor in the ice melting device module is triggered to monitor the operating data of the ice melting device, and the operating data is uploaded to the safety protection module.

[0010] The operation data is encrypted by the security protection module to obtain encrypted operation data;

[0011] The encrypted operation data is uploaded to the production control security zone module through the encryption authentication gateway module and the front-end server module.

[0012] In one embodiment, the method further comprises:

[0013] Sending its own security audit information to the security management center module through the security protection module;

[0014] The security management center module analyzes the self-security audit information to obtain security analysis results; the security analysis results include whether there is network intrusion behavior, whether there is network abnormal behavior and whether the network communication status is normal;

[0015] When the self-security audit information indicates a security problem, the module operation status of the wireless private network module and the security protection module is obtained through the production control security zone module, and the configuration information of the security protection module is remotely updated based on the module operation status.

[0016] In one embodiment, signing and encrypting the ice melting control instruction to obtain the encrypted instruction includes:

[0017] The ice melting control instruction is signed and encrypted by an application layer identity authentication module, a network layer access authentication module and an application layer signature module to obtain an encrypted control instruction;

[0018] The encrypted control command is transmitted to the front-end server module through the ground wire ice melting remote control module and the power-specific forward and reverse isolation module;

[0019] The encrypted control instruction is parsed and verified by the front-end server module, and when it is confirmed that the encrypted control instruction passes the verification, the encrypted control instruction is forwarded to the encryption authentication gateway module;

[0020] The control instruction after the first encryption is re-encrypted by the encryption authentication gateway module based on the data encryption module to obtain the encrypted instruction.

[0021] In one embodiment, after controlling the ice melting device to perform an ice melting operation, the method further includes:

[0022] During the ice-melting operation of the ice-melting device, a security risk detection operation is performed on the business terminal associated with the security protection module through the network probe module to obtain a security risk detection result; the security risk detection operation includes performing at least one of a data collection operation, an external data risk analysis operation and a vulnerability scanning operation on the business terminal.

[0023] In one embodiment, after controlling the ice melting device to perform an ice melting operation, the method further includes:

[0024] When the ice-melting operation meets the preset termination conditions, the ice-melting controller controls the ice-melting device to stop the ice-melting operation, and records the whole process data of the ice-melting operation of the ice-melting device; the whole process data includes at least one of ice-melting time, ice-melting power and energy consumption.

[0025] In the second aspect, the present application also provides a network security protection system for an ice-melting remote control system, the system being used to implement the steps of the above method; the system comprising a production control safety zone module; the production control safety zone module being respectively connected to a ground wire ice-melting remote control module and a security access zone module; the ground wire ice-melting remote control module being connected to a security protection module, and the security protection module being connected to an ice-melting device module; the security protection module being respectively connected to a signature verification module, a data encryption module and a network probe module; the signature verification module being respectively connected to an application layer identity authentication module and an application layer signature module.

[0026] In one of the embodiments, the security protection module is connected to the terminal management module, and the terminal management module is connected to the terminal platform module.

[0027] In one of the embodiments, the secure access zone module is respectively connected to the front-end server module, the security management center module and the encryption authentication gateway module, and the encryption authentication gateway module is respectively connected to the network layer access authentication module and the gatekeeper protection module.

[0028] In one of the embodiments, the ground wire ice melting remote control module is connected to a power-dedicated forward and reverse isolation module; and the output end of the power-dedicated forward and reverse isolation module is connected to the input end of the front-end server module.

[0029] In one of the embodiments, the encryption authentication gateway module is connected to the wireless private network module, the wireless private network module is connected to the security protection module; the security management center module is connected to the security protection module.

[0030] In a third aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0031] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the above method when executed by a processor.

[0032] In a fifth aspect, the present application also provides a computer program product, including a computer program, which implements the steps of the above method when executed by a processor.

[0033] The above-mentioned ice-melting remote control system network security protection method and system, in the production control safety zone module, generates corresponding ice-melting control instructions according to the real-time monitored snow accumulation on the ground wire of the power line through the production control safety zone module; signs and encrypts the ice-melting control instructions to obtain encrypted instructions, and sends the encrypted instructions to the security protection module through the wireless private network module; encrypts and verifies the encrypted instructions through the security protection module to obtain decrypted ice-melting control instructions, and forwards the ice-melting control instructions to the ice-melting device module after confirming that the ice-melting control instructions have authenticity and integrity; executes the ice-melting control instructions through the ice-melting controller in the ice-melting device module to control the ice-melting device to perform ice-melting operations; monitors the operating status and environmental parameters of the terminal equipment associated with the ice-melting device module in real time through the terminal management module, and triggers the sensor in the ice-melting device module to monitor the operating data of the ice-melting device when an abnormal situation occurs in the operating status or the environmental parameters reach the alarm threshold, and uploads the operating data to the security protection module; encrypts the operating data through the security protection module to obtain encrypted operating data; uploads the encrypted operating data to the production control safety zone module through the encryption authentication gateway module and the front-end server module. By encrypting and signing instructions, an encryption protection and verification mechanism is implemented during data transmission, ensuring the authenticity, integrity and confidentiality of control instructions during generation, transmission and execution, significantly reducing the risk of data tampering, forgery and leakage. Through the terminal management module, remote monitoring and management of the ice-melting device is achieved, equipment failures and abnormal behaviors are discovered and handled in a timely manner, data encryption and verification functions are implemented, encryption costs are reduced, system reliability and stability are improved, and the security of remote ice-melting control is comprehensively improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0035] FIG1 is a structural block diagram of a network security protection system for an ice melting remote control system according to an embodiment;

[0036] FIG2 is a schematic flow diagram of a network security protection method for an ice melting remote control system in one embodiment;

[0037] FIG3 is a flow chart of a network security protection method for an ice-melting remote control system in another embodiment. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0039] The network security protection method of the ice-melting remote control system provided in the embodiment of the present application can be applied to the network security protection system of the ice-melting remote control system as shown in Figure 1. The network security protection system of the ice-melting remote control system includes a production control security zone module 1, a ground wire ice-melting remote control module 2, a security access zone module 3, a signature verification module 4, a power-specific forward and reverse isolation module 5, a front-end server module 6, an encryption authentication gateway module 7, a wireless private network module 8, a security protection module 9, an ice-melting device module 10, a data encryption module 11, a network probe module 12, a terminal management module 13, a terminal platform module 14, an application layer identity authentication module 15, a network layer access authentication module 16, a gatekeeper protection module 17, an application layer signature module 18, and a security management center module 19.

[0040] Among them, the production control security zone module is used to provide a safe isolation and monitoring environment, and is used to manage the core control and communication operations of the ice-melting remote control system; the ground wire ice-melting remote control module is used to realize the remote control of the ice-melting device, including sending and receiving instructions, and to ensure the security and real-time nature of the control; the secure access zone module is used to verify the identity and data of the access device to prevent unauthorized access; the signature verification module is used to sign and verify key instructions using digital signature technology to ensure the authenticity and integrity of the instructions; the power-specific forward and reverse isolation module is used to realize one-way data transmission, ensure the physical and logical isolation of the system from the external network, and prevent data leakage or external attacks; the front-end server module is used to carry out instruction parsing, storage and forwarding tasks, including managing the communication between the management system and the terminal device; the encryption and authentication gateway module is used to encrypt and authenticate all transmitted data to ensure the security of data transmission in the network; the wireless private network module is used to provide a dedicated wireless network channel to support efficient and encrypted communication between devices; the security protection module is used to integrate encryption, signature verification and monitoring functions to ensure the security of data transmission and monitor the equipment in real time Running status; the ice-melting device module includes an ice-melting controller, sensors, etc., which are used to receive instructions and execute ice-melting operations, while monitoring the operating status of the device; the data encryption module is used to encrypt and decrypt data using dynamic key management technology to ensure the confidentiality of data during transmission; the network probe module is responsible for real-time monitoring of network traffic, vulnerability scanning and risk analysis, and timely discovery and reporting of security risks; the terminal management module is used to realize remote management of equipment, including start, stop, parameter configuration and status monitoring functions; the terminal platform module is used as an interface for terminal management, providing configuration management, log analysis and alarm processing functions; the application layer identity authentication module is used to verify the identity of the operating user to ensure that only legitimate users can send instructions; the network layer access authentication module is used to perform network layer authentication on access devices to prevent access by illegal devices; the gatekeeper protection module is used to provide additional physical and logical protection measures to ensure the security of network entrances; the application layer signature module is used to use digital signature technology to protect key operations and prevent data tampering; the security management center module is the core module for centralized storage, analysis and management of security data.

[0041] In one embodiment, the network security protection system of the ice-melting remote control system includes a production control safety zone module 1, which is respectively connected to the ground wire ice-melting remote control module 2 and the security access zone module 3; the ground wire ice-melting remote control module 2 is connected to the security protection module 9, and the security protection module 9 is connected to the ice-melting device module 10; the security protection module 9 is respectively connected to the signature verification module 4, the data encryption module 11 and the network probe module 12; the signature verification module 4 is respectively connected to the application layer identity authentication module 15 and the application layer signature module 18.

[0042] In a specific implementation, the remote control center of the ice melting device is deployed in the production control safety zone module 1, and the control command is sent to the ice melting device module 10 deployed on the tower side through the ground wire ice melting remote control module 2 via a dedicated communication line.

[0043] In the specific implementation, the signature verification module 4 uses digital signature technology to sign and verify the issued control instructions. The signature operation adopts an asymmetric encryption algorithm to ensure the authenticity and integrity of the instructions; the verification operation is used to verify whether the received instructions are legal, and also supports caching and verification of the signature results to improve the response speed and security of the system.

[0044] The data encryption module 11 implements encryption and decryption operations of network layer data based on the national secret algorithm, and adopts a combination of symmetric encryption and asymmetric encryption to ensure confidentiality during data transmission. At the same time, by implementing dynamic key management and regular key update strategies, the security of data transmission is further improved.

[0045] The network probe module 12 performs operations such as data collection, external data risk analysis, and vulnerability scanning on the business terminals associated with the security protection module 9. It can promptly discover and report potential security risks and provide decision support for system administrators. At the same time, it also supports real-time monitoring and analysis of the network traffic of terminal devices in order to promptly discover and handle network attacks.

[0046] The ice melting device module 10 is deployed on the tower side, including components such as an ice melting controller and sensors. The ice melting controller is responsible for receiving and executing the issued ice melting control instructions; the sensor is used to monitor the operating status and environmental parameters of the terminal equipment associated with the ice melting device module 10 in real time; the security protection module 9 realizes the secure transmission of data and the monitoring of terminal equipment.

[0047] In one embodiment, the security protection module 9 is connected to the terminal management module 13 , and the terminal management module 13 is connected to the terminal platform module 14 .

[0048] In the specific implementation, the terminal management module 13 provides various functions such as unified management of remote modules, remote maintenance, security log auditing, key management, configuration management, etc., which can realize remote monitoring and management of the ice-melting device, including remote start, stop, parameter adjustment and other operations of the equipment. At the same time, it also supports real-time monitoring and alarm processing of the operating status of the terminal equipment associated with the ice-melting device module 10, so as to timely discover and handle equipment failures.

[0049] In one embodiment, the secure access zone module 3 is respectively connected to the front-end server module 6, the security management center module 19 and the encryption authentication gateway module 7, and the encryption authentication gateway module 7 is respectively connected to the network layer access authentication module 16 and the gatekeeper protection module 17.

[0050] In one embodiment, the ground wire ice melting remote control module 2 is connected to the power-dedicated forward and reverse isolation module 5 ; the output end of the power-dedicated forward and reverse isolation module 5 is connected to the input end of the front-end server module 6 .

[0051] In one of the embodiments, the encryption authentication gateway module 7 is connected to the wireless private network module 8, the wireless private network module 8 is connected to the security protection module 9; and the security management center module 19 is connected to the security protection module 9.

[0052] In the specific implementation, the front-end server module 6 includes key components such as a control server, a database server, and an encryption authentication server. The control server is responsible for issuing control instructions and monitoring the status of terminal devices; the database server is used to store historical data and configuration information of terminal devices; and the encryption authentication server is responsible for implementing functions such as data encryption and signature verification.

[0053] Through distributed modules (such as production control security zone modules, front-end server modules and encryption authentication gateway modules) and dedicated communication channels (such as wireless private network modules), efficient and reliable command transmission and execution are achieved, further optimizing the real-time and accuracy of the ice-melting process, thereby providing all-round protection for the stability of power grid operation.

[0054] In the embodiment of the present application, the network security protection system of the ice melting remote control system generates a corresponding ice melting control instruction in the production control safety zone module 1 according to the real-time monitored snow accumulation on the ground wire of the power line; the ice melting control instruction is signed and encrypted to obtain the encrypted instruction, and the encrypted instruction is sent to the security protection module 9 through the wireless private network module 8; the encrypted instruction is encrypted and signed by the security protection module 9 to obtain the decrypted ice melting control instruction, and after confirming that the ice melting control instruction is authentic and complete, the ice melting control instruction is forwarded to the ice melting device module 10; the ice melting control instruction in the ice melting device module 10 is sent to the security protection module 9 through the wireless private network module 8; the encrypted instruction is encrypted and signed by the security protection module 9 to obtain the decrypted ice melting control instruction, and the ice melting control instruction is forwarded to the ice melting device module 10 after confirming that the ice melting control instruction is authentic and complete; the ice melting control instruction in the ice melting device module 10 is sent to the security protection module 9 through the wireless private network module 8; the decrypted ice melting control instruction ... The ice controller executes the ice-melting control instruction to control the ice-melting device to perform the ice-melting operation; the terminal management module 13 is used to monitor the operating status and environmental parameters of the terminal equipment associated with the ice-melting device module in real time. When an abnormal situation occurs in the operating status or the environmental parameters reach the alarm threshold, the sensor in the ice-melting device module 13 is triggered to monitor the operating data of the ice-melting device, and the operating data is uploaded to the security protection module 9; the operating data is encrypted by the security protection module 9 to obtain the encrypted operating data; the encrypted operating data is uploaded to the production control security zone module 1 through the encryption authentication gateway module 7 and the front-end server module 6.

[0055] In an exemplary embodiment, as shown in FIG2 , a network security protection method for an ice-melting remote control system is provided, and the method is described by taking the application of the method to the network security protection system of the ice-melting remote control system in FIG1 as an example, including:

[0056] Step S202, generating corresponding ice melting control instructions according to the real-time monitored snow accumulation on the ground wire of the power line through the production control safety zone module.

[0057] Among them, the production control safety zone module can be the core module in the network security protection system of the ice-melting remote control system, which is used to safely generate and process power control instructions to ensure their correctness and safety.

[0058] Among them, the snow accumulation condition on the ground line is to monitor the thickness or load of snow on the power line in real time through sensors to evaluate whether ice melting operations are needed.

[0059] Optionally, the production control safety zone module can detect the thickness or weight of snow through sensors installed on the ground wire. When the set danger threshold is reached, it automatically generates control instructions containing specific parameters (such as ice melting time, power, etc.).

[0060] Step S204, the ice melting control instruction is signed and encrypted to obtain the encrypted instruction, and the encrypted instruction is sent to the security protection module through the wireless private network module.

[0061] In a specific implementation, the ice melting control instructions are signed and encrypted, and symmetric encryption or asymmetric encryption algorithms may be used to ensure that the data cannot be eavesdropped or tampered with during transmission.

[0062] Among them, the wireless private network module can be a wireless communication network dedicated to the power system to ensure the exclusivity and security of data during transmission. The wireless private network uses an independent frequency band to transmit data, prevents conventional network attacks, and provides efficient and low-latency communication.

[0063] Step S206, encrypting and verifying the encrypted instruction through the security protection module to obtain the decrypted ice-melting control instruction, and forwarding the ice-melting control instruction to the ice-melting device module after confirming the authenticity and integrity of the ice-melting control instruction.

[0064] Among them, the security protection module is a key security node in the system, responsible for decrypting, verifying and securely forwarding data.

[0065] In a specific implementation, the security protection module decrypts and verifies the signature of the re-encrypted control instruction, which can be to decrypt and restore the encrypted instruction content and verify the signature to ensure the data source is reliable. Optionally, when the authenticity and integrity of the ice-melting control instruction are confirmed, the security protection module forwards the decrypted instruction to the ice-melting device module and records the operation log at the same time for subsequent auditing.

[0066] Step S208, the ice melting controller in the ice melting device module executes the ice melting control instruction to control the ice melting device to perform ice melting operation.

[0067] The ice melting device module includes an ice melting controller, a sensor, and an ice melting device for performing ice melting operations.

[0068] Among them, the ice melting controller is responsible for receiving the decrypted instructions and starting the ice melting device to perform ice melting operations.

[0069] In the specific implementation, during the ice-melting operation, the system monitors the equipment status and operating parameters, such as power, temperature, etc., in real time, and uploads them to the production control safety zone module to ensure safe and efficient operation.

[0070] Step S210, the terminal management module monitors the operating status and environmental parameters of the terminal equipment associated with the ice-melting device module in real time. When an abnormal situation occurs in the operating status or the environmental parameters reach the alarm threshold, the sensor in the ice-melting device module is triggered to monitor the operating data of the ice-melting device and upload the operating data to the safety protection module.

[0071] Among them, the terminal management module is used to uniformly manage all terminal devices associated with the ice melting device, supports real-time monitoring, status alarm, remote maintenance and data upload, and is responsible for real-time monitoring of the operating status of the terminal equipment (such as whether it is working normally) and environmental parameters (such as temperature, voltage, etc.).

[0072] Among them, the terminal equipment associated with the ice melting device can be related hardware or communication equipment that directly participates in the ice melting operation or supports the operation of the ice melting device, such as ice melting controllers, sensors, communication equipment, power supply equipment supporting the operation of the ice melting device, remote diagnostic terminals, status indication equipment and other auxiliary equipment.

[0073] The operating status may include whether the communication is normal, whether the device is responsive, etc.; the environmental parameters may include parameters such as power load and external temperature.

[0074] Among them, the sensors in the ice melting device module are sensing devices installed inside the ice melting device, which are used to collect key data during the operation of the device, such as temperature, ice melting power, etc.

[0075] Step S212: encrypt the operation data through the security protection module to obtain encrypted operation data.

[0076] Among them, the security protection module is also used to encrypt the operation data to ensure the security of the data during transmission. The encryption authentication gateway module is used to further strengthen the encryption of the data to ensure that the data cannot be cracked or tampered with during external network transmission. The front-end server module is responsible for storing or uploading the encrypted data to the production control security zone module to provide real-time data access and analysis for system administrators. The production control security zone module is used to receive the uploaded operation data and store and process it to provide a basis for subsequent decision-making analysis.

[0077] Step S214, uploading the encrypted operation data to the production control security zone module through the encryption authentication gateway module and the front-end server module.

[0078] In the specific implementation, when the terminal management module detects an abnormal operating status (such as the device stops responding) or the environmental parameters reach the preset alarm threshold (such as temperature exceeds the standard), the alarm is triggered immediately. After the alarm is triggered, the sensor in the ice melting device module starts to collect the operating data of the ice melting device (such as power, temperature, internal status of the device, etc.). The collected operating data is sent to the security protection module for encryption processing to ensure data security. The security protection module encrypts the operating data and uses symmetric or asymmetric encryption algorithms to prevent the data from being stolen or tampered with during transmission. The encrypted operating data is finally uploaded to the production control security zone module through the encryption authentication gateway module and the front-end server module to further enhance the encryption security. The production control security zone module receives data from the front-end server module, decrypts the data, and stores or further analyzes it to support subsequent operation monitoring and strategy optimization.

[0079] The terminal management module can realize remote monitoring and management of ice melting devices, timely discover and handle equipment failures and abnormal behaviors, realize data encryption and verification functions, reduce encryption costs, and improve system reliability and stability. At the same time, through multi-level monitoring and data processing mechanisms such as terminal management modules, sensors, and security protection modules, the ability to respond quickly to equipment abnormalities is improved, ensuring the authenticity and security of operating data.

[0080] In the above-mentioned network security protection method for the ice-melting remote control system, the corresponding ice-melting control instruction is generated by the production control safety zone module according to the real-time monitoring of the snow accumulation on the ground wire of the power line; the ice-melting control instruction is signed and encrypted to obtain the encrypted instruction, and the encrypted instruction is sent to the security protection module through the wireless private network module; the encrypted instruction is encrypted and signed by the security protection module to obtain the decrypted ice-melting control instruction, and after confirming that the ice-melting control instruction has authenticity and integrity, the ice-melting control instruction is forwarded to the ice-melting device module; the ice-melting control instruction is executed by the ice-melting controller in the ice-melting device module to control the ice-melting device to perform ice-melting operation; the operating status and environmental parameters of the terminal equipment associated with the ice-melting device module are monitored in real time by the terminal management module, and when an abnormal situation occurs in the operating status or the environmental parameters reach the alarm threshold, the sensor in the ice-melting device module is triggered to monitor the operating data of the ice-melting device, and the operating data is uploaded to the security protection module; the operating data is encrypted by the security protection module to obtain encrypted operating data; the encrypted operating data is uploaded to the production control safety zone module by the encryption authentication gateway module and the front-end server module. By encrypting and signing instructions, an encryption protection and verification mechanism is implemented during data transmission, ensuring the authenticity, integrity and confidentiality of control instructions during generation, transmission and execution, significantly reducing the risk of data tampering, forgery and leakage. Through the terminal management module, remote monitoring and management of the ice-melting device is achieved, equipment failures and abnormal behaviors are discovered and handled in a timely manner, data encryption and verification functions are implemented, encryption costs are reduced, system reliability and stability are improved, and the security of remote ice-melting control is comprehensively improved.

[0081] In another embodiment, it also includes: sending its own security audit information to the security management center module through the security protection module; analyzing its own security audit information through the security management center module to obtain security analysis results; the security analysis results include whether there is network intrusion behavior, whether there is network abnormal behavior and whether the network communication status is normal; when the own security audit information indicates that a security problem has occurred, the module operation status of the wireless private network module and the security protection module is obtained through the production control security zone module, and the configuration information of the security protection module is remotely updated based on the module operation status.

[0082] Among them, the self-security audit information includes the analysis data in the security log, including information such as device operation status, access records, attack attempts, abnormal behavior, etc.

[0083] The security management center module uniformly processes and analyzes the security audit information from the security protection module to generate security analysis results. The security analysis results include whether there is network intrusion (such as unauthorized access attempts or attacks), whether there is abnormal network behavior (such as abnormal traffic, communication interruption or data packet loss), and whether the network communication status is normal (evaluating the health status of the communication channel).

[0084] As the core control module in the ice-melting remote control system, the production control safety zone module is responsible for coordinating the work of other modules, including obtaining module operating status and performing configuration updates.

[0085] When the security audit information indicates a security issue, the production control security zone module obtains the module operation status of the wireless private network module and the security protection module, such as performance indicators, network communication status, security events, and configuration parameters, identifies the update strategy based on the module operation status, and remotely updates the configuration information of the security protection module according to the update strategy, such as enabling or disabling certain security policies, modifying communication parameters, etc.

[0086] The technical solution of this embodiment provides a method for centralized auditing of security log information of security protection modules and centralized operation and maintenance of security protection modules, which reduces the operation and maintenance costs of security protection modules, improves the reliability and stability of security protection modules, and comprehensively improves the stability of security protection modules. By uploading the security audit information of the security protection module to the security management center module, centralized auditing and unified analysis of logs and security events are achieved, which helps to quickly identify and locate potential security threats. By continuously uploading security audit information and analyzing it in real time, problems can be discovered as soon as security threats occur. When a problem is detected, the module operation status can be immediately obtained through the production control security zone module, and the configuration can be quickly repaired by remote updating, which improves the problem response speed. At the same time, the configuration can be dynamically adjusted according to the real-time analysis results to ensure the real-time and adaptability of the system security policy.

[0087] In another embodiment, the ice-melting control instruction is signed and encrypted to obtain the encrypted instruction, including: signing and encrypting the ice-melting control instruction through the application layer identity authentication module, the network layer access authentication module and the application layer signature module to obtain an encrypted control instruction; transmitting the encrypted control instruction to the front-end server module through the ground wire ice-melting remote control module and the power-specific forward and reverse isolation module; parsing and verifying the encrypted control instruction through the front-end server module, and forwarding the encrypted control instruction to the encryption authentication gateway module after confirming that the encrypted control instruction has passed the verification; and re-encrypting the encrypted control instruction based on the data encryption module through the encryption authentication gateway module to obtain an encrypted instruction.

[0088] Among them, the application layer identity authentication module can be used to verify whether the source of the instruction is legal and ensure that the instruction is generated by an authorized user.

[0089] Among them, the network layer access authentication module can be used to authenticate the access rights of instructions during network transmission to prevent illegal access.

[0090] Among them, the application layer signature module can be used to digitally sign the instruction content to ensure that the instruction content has not been tampered with.

[0091] Optionally, the ice-melting control instructions are signed and encrypted through the application layer identity authentication module, the network layer access authentication module and the application layer signature module. The ice-melting control instructions can be encrypted using a symmetric encryption or an asymmetric encryption algorithm to obtain an encrypted control instruction to ensure that the data cannot be eavesdropped or tampered with during transmission.

[0092] Among them, the ground wire ice melting remote control module can be a communication module used to connect to the ice melting device module, and send ice melting control instructions through a dedicated channel.

[0093] Among them, the power-specific forward and reverse isolation module is a hardware device that ensures that control instructions can only be transmitted in one direction to prevent information leakage or attack.

[0094] Physical isolation and dedicated communication lines are used during the transmission process to enhance data security and ensure that the ice melting device can only receive legal control instructions.

[0095] Among them, the front-end server module can be an intermediate processing node of the network security protection system of the ice-melting remote control system, responsible for verifying the legitimacy of the data and forwarding legal instructions.

[0096] In the specific implementation, the encrypted control instruction is parsed and verified by the front-end server module, which can be to parse the instruction format, verify its encrypted content and digital signature, and ensure that the data has not been tampered with. If the instruction format or signature verification fails, the server will discard the instruction and alarm to ensure that the wrong data will not enter the subsequent process.

[0097] Among them, the encryption authentication gateway module can be a node that performs the second layer encryption on the instructions and is also responsible for verifying the legitimacy of the instructions.

[0098] Among them, the data encryption module can provide encryption functions based on national secret algorithms or other encryption algorithms to ensure a higher level of data security.

[0099] The instructions are re-encrypted through the encryption authentication gateway module to obtain the final encrypted instructions, which enhances security. Even if the first encryption layer is cracked, the valid instruction content cannot be directly obtained.

[0100] The technical solution of this embodiment realizes the whole process security control from instruction generation, transmission to execution, ensuring the reliability, real-time and security of ice-melting operations, while effectively avoiding potential network attacks and data leakage risks.

[0101] In another embodiment, after controlling the ice-melting device to perform an ice-melting operation, it also includes: performing a security risk detection operation on a business terminal associated with a security protection module through a network probe module during the ice-melting operation of the ice-melting device to obtain a security risk detection result; the security risk detection operation includes performing at least one of a data collection operation, an external data risk analysis operation and a vulnerability scanning operation on the business terminal.

[0102] Among them, the business terminal associated with the security protection module can be a terminal in the security protection module used to perform security protection functions.

[0103] Among them, the network probe module can be a module used to monitor network security in real time, responsible for collecting network traffic and terminal status, and analyzing potential threats.

[0104] In specific implementation, security risk detection operations include data collection operations, external data risk analysis operations, and vulnerability scanning operations on business terminals. Among them, data collection operations on business terminals may include collecting real-time data of business terminals such as system logs, network traffic, and access records; external data risk analysis operations may include evaluating communications or data packets from the outside to determine whether they contain potential malicious attacks or threats; vulnerability scanning operations may include scanning the security configuration, known vulnerabilities, and system update status of business terminals to discover security risks that may be exploited.

[0105] The technical solution of this embodiment remotely monitors and manages the business modules related to the security protection module through the network probe module, which can not only ensure the smooth execution of the ice-thawing operation, but also monitor the security of the business terminals associated with it in real time during the operation, thereby effectively preventing network attacks, data leakage and other risks, and enhancing the overall reliability and security of the system.

[0106] In another embodiment, after controlling the ice melting device to perform an ice melting operation, it also includes: when the ice melting operation meets a preset end condition, controlling the ice melting device to stop the ice melting operation through an ice melting controller, and recording the whole process data of the ice melting operation of the ice melting device; the whole process data includes at least one of ice melting time, ice melting power and energy consumption.

[0107] Among them, the ice melting controller, as the core control unit of the ice melting device, is responsible for receiving and executing instructions; controlling the start and stop of the ice melting device to ensure accurate operation.

[0108] Among them, the whole process data includes key data sets generated during the ice melting operation, such as ice melting time, ice melting power and energy consumption, etc. Ice melting time is used to record the duration of ice melting operation and measure ice melting efficiency; ice melting power is used to reflect the power consumption of ice melting device and measure equipment performance; energy consumption includes overall power consumption and is used for energy management and optimization.

[0109] Among them, the preset end conditions are the ice-melting operation termination conditions set according to specific indicators, such as the snow is completely melted, the ice-melting time reaches the upper limit, and the energy consumption exceeds the safety threshold.

[0110] In the specific implementation, after the ice melting operation is started, the system continuously monitors the device status through sensors and ice melting controllers, and monitors the degree of snow melting and the operating parameters of the ice melting equipment (such as voltage, current, etc.); it determines whether the preset end condition is triggered, such as the snow detector confirms that the ice melting target has been reached or the operating time and energy consumption have reached the set threshold. If the preset end condition is triggered, the ice melting controller cuts off the power supply of the equipment or controls the equipment to stop working. During the ice melting operation, all key parameters during the ice melting period are recorded through sensors and ice melting controllers, and the whole process data is uploaded to the production control safety zone module for subsequent query and analysis.

[0111] The technical solution of this embodiment helps to fully understand the ice melting process and optimize equipment operation through recording and analysis of the whole process data; energy-saving strategies are formulated through energy consumption analysis; the whole process data provides data support for the operation and maintenance of the system, enhances the system reliability and transparency, and is suitable for power line ice melting operations under various climatic and environmental conditions.

[0112] In another embodiment, as shown in FIG3 , a network security protection method for an ice melting remote control system is provided, which is described by taking the method applied to the network security protection system for an ice melting remote control system in FIG1 as an example, and includes the following steps:

[0113] S302, generating corresponding ice melting control instructions according to the real-time monitoring of snow accumulation on the ground wire of the power line through the production control safety zone module.

[0114] S304, signing and encrypting the ice-melting control instruction through the application layer identity authentication module, the network layer access authentication module and the application layer signature module to obtain an encrypted control instruction.

[0115] S306, transmitting the encrypted control instruction to the front-end server module through the ground wire ice melting remote control module and the power-specific forward and reverse isolation module.

[0116] S308, parsing and verifying the encrypted control instruction through the front-end server module, and forwarding the encrypted control instruction to the encryption authentication gateway module if it is confirmed that the encrypted control instruction passes the verification.

[0117] S310, re-encrypting the control instruction that has been encrypted once based on the data encryption module through the encryption authentication gateway module to obtain an encrypted instruction.

[0118] S312, sending the encrypted instruction to the security protection module through the wireless private network module.

[0119] S314, encrypting and verifying the encrypted instruction through the security protection module to obtain the decrypted ice-melting control instruction, and forwarding the ice-melting control instruction to the ice-melting device module after confirming that the ice-melting control instruction is authentic and complete.

[0120] In one of the embodiments, it also includes: sending its own security audit information to the security management center module through the security protection module; analyzing its own security audit information through the security management center module to obtain security analysis results; the security analysis results include whether there is network intrusion behavior, whether there is network abnormal behavior and whether the network communication status is normal; when the own security audit information indicates that a security problem has occurred, the module operation status of the wireless private network module and the security protection module is obtained through the production control security zone module, and the configuration information of the security protection module is remotely updated based on the module operation status.

[0121] S316, executing the ice melting control instruction through the ice melting controller in the ice melting device module to control the ice melting device to perform ice melting operation.

[0122] S318, performing a security risk detection operation on the business terminal associated with the security protection module during the ice-melting operation of the ice-melting device through the network probe module to obtain a security risk detection result.

[0123] S320, monitor the operating status and environmental parameters of the terminal equipment associated with the ice-melting device module in real time through the terminal management module. When an abnormal situation occurs in the operating status or the environmental parameters reach the alarm threshold, the sensor in the ice-melting device module is triggered to monitor the operating data of the ice-melting device and upload the operating data to the security protection module.

[0124] S322, encrypt the operation data through the security protection module to obtain the encrypted operation data; upload the encrypted operation data to the production control security zone module through the encryption authentication gateway module and the front-end server module.

[0125] S324, when the ice-melting operation meets the preset end condition, the ice-melting device is controlled by the ice-melting controller to stop the ice-melting operation, and the whole process data of the ice-melting operation of the ice-melting device is recorded.

[0126] It should be noted that the specific limitations of the above steps can refer to the specific limitations of a network security protection method for an ice-melting remote control system mentioned above.

[0127] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0128] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0129] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0130] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0131] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A network security protection method for an ice melting remote control system, characterized in that: The method comprises: The production control safety zone module generates corresponding ice melting control instructions based on the real-time monitoring of snow accumulation on the ground wire of the power line; Signing and encrypting the ice melting control instruction to obtain an encrypted instruction, and sending the encrypted instruction to the security protection module through the wireless private network module; The encrypted instruction is encrypted and signature verified by the security protection module to obtain the decrypted ice-melting control instruction, and after confirming that the ice-melting control instruction is authentic and complete, the ice-melting control instruction is forwarded to the ice-melting device module; The ice melting controller in the ice melting device module executes the ice melting control instruction to control the ice melting device to perform ice melting operation; The terminal management module monitors the operating status and environmental parameters of the terminal equipment associated with the ice melting device module in real time. When an abnormality occurs in the operating status or the environmental parameters reach an alarm threshold, the sensor in the ice melting device module is triggered to monitor the operating data of the ice melting device, and the operating data is uploaded to the safety protection module. The security protection module encrypts the operation data to obtain encrypted operation data; The encrypted operation data is uploaded to the production control security zone module through the encryption authentication gateway module and the front-end server module.

2. The method according to claim 1, characterized in that The method further comprises: Sending its own security audit information to the security management center module through the security protection module; The security management center module analyzes the self-security audit information to obtain security analysis results; the security analysis results include whether there is network intrusion behavior, whether there is network abnormal behavior and whether the network communication status is normal; When the self-security audit information indicates a security problem, the module operation status of the wireless private network module and the security protection module is obtained through the production control security zone module, and the configuration information of the security protection module is remotely updated based on the module operation status.

3. The method according to claim 1, characterized in that The step of signing and encrypting the ice melting control instruction to obtain the encrypted instruction includes: The ice melting control instruction is signed and encrypted by an application layer identity authentication module, a network layer access authentication module and an application layer signature module to obtain an encrypted control instruction; The encrypted control command is transmitted to the front-end server module through the ground wire ice melting remote control module and the power-specific forward and reverse isolation module; The encrypted control instruction is parsed and verified by the front-end server module, and when it is confirmed that the encrypted control instruction passes the verification, the encrypted control instruction is forwarded to the encryption authentication gateway module; The control instruction after the first encryption is re-encrypted by the encryption authentication gateway module based on the data encryption module to obtain the encrypted instruction.

4. The method according to claim 1, characterized in that: After the controlling the ice melting device to perform an ice melting operation, the method further includes: During the ice-melting operation of the ice-melting device, a security risk detection operation is performed on the business terminal associated with the security protection module through the network probe module to obtain a security risk detection result; the security risk detection operation includes performing at least one of a data collection operation, an external data risk analysis operation and a vulnerability scanning operation on the business terminal.

5. The method according to claim 1, characterized in that After the controlling the ice melting device to perform an ice melting operation, the method further includes: When the ice-melting operation meets the preset termination conditions, the ice-melting controller controls the ice-melting device to stop the ice-melting operation, and records the whole process data of the ice-melting operation of the ice-melting device; the whole process data includes at least one of ice-melting time, ice-melting power and energy consumption.

6. A network security protection system for remote control system of ice melting, characterized in that: The system is used to execute the steps of the network security protection method of the ice-melting remote control system as described in any one of claims 1 to 5; the system includes a production control security zone module; the production control security zone module is respectively connected to the ground wire ice-melting remote control module and the security access zone module; the ground wire ice-melting remote control module is connected to the security protection module, and the security protection module is connected to the ice-melting device module; the security protection module is respectively connected to the signature verification module, the data encryption module and the network probe module; the signature verification module is respectively connected to the application layer identity authentication module and the application layer signature module.

7. The system according to claim 6, characterized in that The security protection module is connected to the terminal management module, and the terminal management module is connected to the terminal platform module.

8. The system according to claim 7, characterized in that The security access zone module is respectively connected to the front-end server module, the security management center module and the encryption authentication gateway module, and the encryption authentication gateway module is respectively connected to the network layer access authentication module and the gatekeeper protection module.

9. The system according to claim 8, characterized in that The ground wire ice melting remote control module is connected to the power-dedicated forward and reverse isolation module; the output end of the power-dedicated forward and reverse isolation module is connected to the input end of the front-end server module.

10. The system according to claim 9, characterized in that The encryption authentication gateway module is connected to the wireless private network module, the wireless private network module is connected to the security protection module; the security management center module is connected to the security protection module.

Images