Protection device ring network communication network security test system and method

Abstract

The invention relates to the technical field of power system relay protection, in particular to a protection device ring network communication network security test system and method, and the system comprises N protection devices, and a conversion device 1, a network security tester and a conversion device 2 which are connected with one another, each protection device comprises a wave protection ring network port and a starting ring network port; the N protection devices are mutually connected through respective starting ring network ports to form a starting ring network; the conversion device 1 is connected with a protection ring network port of the protection device 1, and the conversion device 2 is connected with a protection ring network port of the protection device N; the two conversion devices connect the protection ring network formed by the N protection devices end to end to form a bidirectional ring network structure. According to the invention, the bidirectional ring network structure is constructed, the ring network communication network security test is carried out under the condition that the normal operation of the protection ring network and the starting ring network is not influenced, the real operation environment is restored, and the test efficiency is improved.

Description

Technical Field

[0001] The invention relates to the technical field of relay protection of electric power systems, and in particular to a ring network communication network security testing system and method for protection devices. Background Art

[0002] With the rapid development of electric power technology, the monitoring system of smart substations is becoming increasingly intelligent, and the large-scale deployment of merging units and smart terminals has significantly improved the automation level of substations. However, this trend has also brought about a significant increase in the complexity of monitoring and control loops, as well as the diversification of equipment interface types, which undoubtedly increases the difficulty of equipment installation and operation and maintenance, and puts higher demands on human resources. More importantly, this complexity may weaken the speed and reliability of the relay protection system, posing a potential threat to the stable operation of the power system.

[0003] In order to meet the above challenges, the industry has carried out in-depth optimization of relay protection devices. In particular, in the field of distributed main transformer protection and modular bus differential protection, efficient interconnection between target devices is achieved by building a process layer ring communication network. To this end, the industry has formulated a special ring network communication specification, which clarifies the key elements such as the topology structure, communication mechanism and message format of the ring network to ensure the interoperability of devices in the ring network.

[0004] However, in this optimization process, new challenges were faced. Since the setting method of the protection device requires each slave to receive data, identify and forward data, communication security has become an issue that cannot be ignored. Especially in the context of the country's high attention to network security, the State Grid has integrated network security requirements into power equipment. Therefore, the test of ring network communication security is particularly important.

[0005] The current testing methods for ring network communication security have obvious shortcomings. The traditional testing method requires the network security tester to be connected in series in the protection ring network, which not only causes the protection ring network connection to be interrupted and affects normal operation, but also faces the problem of low efficiency when testers integrate and judge the test results of the network security tester, relay protection tester and protection device. Summary of the invention

[0006] The purpose of the present invention is to provide a protection device ring network communication network security testing system and method in order to solve at least one of the above technical problems, optimize the existing ring network communication security testing method to improve the testing efficiency, and ensure the safe operation of relay protection equipment in complex environments.

[0007] The present invention achieves the above-mentioned purpose through the following technical solutions:

[0008] A protection device ring network communication network security test system, comprising: N protection devices, a conversion device 1 connected to each other, a network security tester, and a conversion device 2;

[0009] Each protection device has four ports: ports 1 and 2 are protection ring network ports, ports 3 and 4 are start-up ring network ports;

[0010] The N protection devices are connected to each other through their respective start-up ring network ports to form a start-up ring network; wherein the protection device 1 and the protection device N are adjacent nodes in the start-up ring network;

[0011] The conversion device 1 is connected to port 1 of the protection device 1, and the conversion device 2 is connected to port 2 of the protection device N; the two conversion devices connect the ends of the protection ring network formed by the N protection devices to form a bidirectional ring network structure;

[0012] The conversion device 1 and the conversion device 2 are used to realize transparent transmission of normal messages in the protection ring network;

[0013] The network security tester is used to test the network security of protection devices in a protection ring network.

[0014] Furthermore, the system further comprises: a PC terminal;

[0015] The PC is connected to the network security tester, and is used to obtain test data and to judge and display test results.

[0016] Furthermore, the system also includes: a relay protection tester;

[0017] The relay protection tester is used to apply a fault quantity to the protection device 1;

[0018] The PC end is connected to the relay protection tester, and the PC end is also used to obtain test data of the relay protection tester and judge and display the test results.

[0019] Furthermore, the PC terminal includes: an interface module, a data judgment module, and a judgment result display module;

[0020] The interface module is used to connect with the test instruments and obtain the test data of each test instrument;

[0021] The data judgment module is used to judge the test data and obtain the test results;

[0022] The judgment result display module is used to display the test result.

[0023] Furthermore, the interface module includes:

[0024] A network security tester interface, used to connect to the network security tester and obtain test data of network security messages from the network security tester;

[0025] A relay protection tester interface, used to connect to the relay protection tester and obtain test data of the relay protection test from the relay protection tester;

[0026] 61850 communication interface, used to obtain protection information data of the protection device.

[0027] A method for testing the security of a ring network communication network of a protection device, using any of the above-described network testing systems for testing the security of a ring network communication network of a protection device, the method comprising the following steps:

[0028] The network security tester is connected in series to a protection ring network formed by multiple protection devices through two conversion devices to form a bidirectional ring network structure;

[0029] The network security tester injects a network security test message into the protection ring network through the conversion device;

[0030] The PC software obtains the test data of the network security message of the network security tester and judges and displays the test results.

[0031] Furthermore, the network security test messages include: network stress messages, network storm messages, network avalanche messages, and network abnormality messages.

[0032] Furthermore, the network pressure message includes ARP broadcast, UDP broadcast, and TCP unknown unicast;

[0033] The network storm message includes a ring network storm frame, and the ring network storm frame is configured as follows: the message source address uses the device MAC address, the message sequence number changes once every 40ms, and the rest of the content remains unchanged;

[0034] The network avalanche message includes a ring network application frame, and the ring network application frame is configured as follows: the message source address uses the device MAC address, the message sequence number increases and flips normally, the switch quantity changes every frame, and other contents remain unchanged;

[0035] The network abnormal messages include unicast and multicast of non-application data, abnormal sampling data quality bit identification, abnormal sampling value transmission, device duplicate frames, CRC check errors and multicast with frame length errors, source and destination MAC address errors, ring network label errors, and APPID errors.

[0036] Furthermore, the method further comprises:

[0037] During the process of the network security tester sending the message, the relay protection tester is used to apply the fault quantity to the protection device 1 to perform the protection action.

[0038] An electronic device comprises a processor, a memory and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the method for testing the ring network communication security of a protection device as described above is implemented.

[0039] The beneficial effects of the present invention are:

[0040] The present invention successfully integrates the network security tester into the protection ring network in the dual ring network architecture through the conversion device 1 and the conversion device 2, and constructs a bidirectional ring network structure. This design not only ensures the parallel and unimpeded operation of the protection ring network and the start-up ring network, but also highly simulates the real operating environment of the power system, laying a solid foundation for the accuracy and practicality of the test.

[0041] The network security tester of the present invention can inject various types of network security test messages into the protection ring network, including network stress messages, network storm messages, network avalanche messages and network abnormal messages, so as to comprehensively and deeply test the network security performance of the protection device. This test method can restore the network attack scenarios that may be encountered in actual operation to the greatest extent, and provide strong support for the security protection of the power system.

[0042] The PC software of the present invention can acquire and process data from the network security tester, relay protection tester and protection device in real time. Through in-depth analysis and judgment of these data, the PC software can quickly summarize the test results and display them in an intuitive way. This function not only greatly improves the test efficiency, but also significantly reduces the confirmation time of the test data, providing a strong guarantee for the rapid response and decision-making of the power system.

[0043] The present invention provides strong technical support and guarantee for the safe and stable operation of the power system through innovative network structure simulation, comprehensive network security testing and efficient test result aggregation and display. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 This is a typical schematic diagram of the protection device ring network communication structure;

[0045] Figure 2 A schematic diagram of the structure of a protection device ring network communication network security test system according to an embodiment of the present invention;

[0046] Figure 3 A connection diagram of a protection device ring network communication network security test system according to an embodiment of the present invention;

[0047] Figure 4 A schematic diagram of a PC software obtaining data structure according to an embodiment of the present invention;

[0048] Figure 5 A flow chart of a method for testing the security of a ring network communication network of a protection device according to an embodiment of the present invention;

[0049] Figure 6 This is a flow chart of a method for security testing of a protection device ring network communication network according to another embodiment of the present invention. DETAILED DESCRIPTION

[0050] The content of the present invention will now be discussed with reference to exemplary embodiments. It should be understood that the embodiments discussed are only to enable those skilled in the art to better understand and thus implement the content of the present invention, rather than implying any limitation on the scope of the present invention.

[0051] As used herein, the term “including” and variations thereof are to be interpreted as open-ended terms meaning “including, but not limited to.” The term “based on” is to be interpreted as “based, at least in part, on.” The terms “one embodiment” and “an embodiment” are to be interpreted as “at least one embodiment.”

[0052] Embodiment 1

[0053] Figure 1 This is a typical schematic diagram of the protection device ring network communication structure; Figure 1 The protection ring network and startup ring network when the protection device is operating normally, as well as the direction of ring network data flow are displayed. Figure 2 A schematic diagram of the structure of a protection device ring network communication network security test system according to an embodiment of the present invention; Figure 3 This is a connection diagram of a protection device ring network communication network security test system according to an embodiment of the present invention. Figure 1-3 As shown, according to one embodiment of the present invention, a protection device ring network communication network security test system includes: N protection devices, a conversion device 1, a network security tester, and a conversion device 2 connected to each other;

[0054] Each protection device has four ports: ports 1 and 2 are protection ring network ports, ports 3 and 4 are start-up ring network ports;

[0055] N protection devices are connected to each other through their respective start-up ring network ports to form a start-up ring network; wherein protection device 1 and protection device N are adjacent nodes in the start-up ring network;

[0056] The conversion device 1 is connected to the port 1 of the protection device 1, and the conversion device 2 is connected to the port 2 of the protection device N; the two conversion devices connect the ends of the protection ring network formed by the N protection devices to form a bidirectional ring network structure;

[0057] The conversion device 1 and the conversion device 2 are used to realize the transparent transmission of normal messages in the protection ring network;

[0058] The network security tester is used to test the network security of protection devices in the protection ring network.

[0059] In this embodiment, a protection device ring network communication network security test system is provided, including: N protection devices, a conversion device 1, a network security tester, and a conversion device 2. Each protection device includes four ports: ports 1 and 2 are protection ring network ports, and ports 3 and 4 are startup ring network ports. N protection devices are connected in series through the protection ring network ports, the conversion device 1 is connected to port 1 of the protection device 1 (located at the end of the series connection), and the conversion device 2 is connected to port 2 of the protection device N (located at the end of the series connection); wherein, the protection device 1 and the protection device N are adjacent nodes in the startup ring network. The conversion device 1 and the conversion device 2 are connected in series with the network security tester, and the conversion device 1 and the conversion device 2 are connected to each other, and together construct a bidirectional ring network structure including the protection ring network. The two conversion devices play the role of transparent transmission in the system, and they do not process the normal messages in the protection ring network in any way, ensuring the normal operation of the protection device during the test process. At the same time, the conversion device is also responsible for the message transmission between the network security tester and the protection device, so that the network security test message can be smoothly injected into the protection ring network, and the message in the protection ring network can also be received by the network security tester. Therefore, the network security tester can effectively test the network security of the protection device in this bidirectional ring network structure.

[0060] The protection device ring network communication network security test system provided by the present invention forms a protection ring network by connecting the conversion device 1, the conversion device 2, the network security tester and the protection ring network ports of N protection devices in series, and connects the conversion device 1 and the conversion device 2 to each other, thereby constructing a bidirectional ring network structure including the protection ring network. The conversion device plays a transparent transmission role in the system to ensure the smooth transmission of test messages and normal messages. The present invention realizes the effective test of the network security of the protection device in the protection ring network, and at the same time ensures the normal operation of the protection device during the test process.

[0061] Figure 4 The following is a schematic diagram of a PC software data acquisition structure according to an embodiment of the present invention. Figure 2 and Figure 4 As shown, according to one embodiment of the present invention, the system further includes: a PC terminal;

[0062] The PC is connected to the network security tester, and is used to obtain test data and judge and display test results.

[0063] Preferably, the system further comprises: a relay protection tester;

[0064] The relay protection tester is used to apply a fault quantity to the protection device 1;

[0065] The PC end is connected to the relay protection tester, and the PC end is also used to obtain the test data of the relay protection tester and judge and display the test results.

[0066] In this embodiment, the system integrates multiple components such as a PC, a network security tester, and a relay protection tester. Among them, the PC, as the core control and processing unit, can obtain test data at the network level by connecting to the network security tester, and then judge these data and display the test results on the PC interface to ensure that the security of the network environment is verified. In addition, the system also introduces a relay protection tester, which is responsible for applying simulated fault quantities to the protection device to detect the response performance of the protection device. The PC is also connected to the relay protection tester, which can capture the test data generated by it in real time, and accurately judge and intuitively display the test results based on these data. The PC is installed with software developed independently for the system, which not only has powerful data collection functions, can synchronously receive real-time data from the network security tester, the relay protection tester and the protection device itself, but also has built-in advanced test result judgment logic. This includes but is not limited to in-depth analysis of the security test message result data of the network security tester, accurate comparison of the test result data of the relay protection tester, and comprehensive verification of the protection information data sent to the protection device. Ultimately, the PC software will combine all test results to give a comprehensive and accurate overall judgment, providing users with clear and reliable test feedback, greatly improving the system's testing efficiency and accuracy.

[0067] According to one embodiment of the present invention, the PC terminal includes: an interface module, a data judgment module, and a judgment result display module;

[0068] The interface module is used to connect with the test instruments and obtain the test data of each test instrument;

[0069] The data judgment module is used to judge the test data and obtain the test results;

[0070] The judgment result display module is used to display the test results.

[0071] Preferably, the interface module comprises:

[0072] A network security tester interface, used to connect to a network security tester and obtain test data of network security messages from the network security tester;

[0073] A relay protection tester interface is used to connect to the relay protection tester and obtain the test data of the relay protection test from the relay protection tester;

[0074] 61850 communication interface, used to obtain protection information data of the protection device.

[0075] In this embodiment, the PC-side software, as the core component of the system, is independently developed, and its design fully considers the compatibility and efficient interaction with various test instruments. Specifically, the PC-side software integrates three core interfaces: network security tester interface, relay protection tester interface and 61850 communication interface. The network security tester interface is specially designed for seamless connection with the network security tester, and it can fully capture the result data of the network security message generated by the network security tester. These data not only cover basic communication indicators, such as message sending flow and message receiving flow, but also go deep into the detailed records of message frame length and message duration, as well as clear signs of success or failure of message sending and receiving, providing users with a detailed network security test analysis report. The relay protection tester interface focuses on the connection and data interaction with the relay protection tester, and it can accurately obtain the result data of the relay protection test. These data not only include a clear indication of whether the experiment is successful, but also record in detail the number of experimental tests, the duration of the experiment, the specific type of experiment, and the various key data generated during the experiment, providing users with strong data support for evaluating the performance of the protection device. The 61850 communication interface is dedicated to establishing a stable communication link with the protection device and obtaining the protection information data of the protection device in real time. These data are rich in content, covering key information such as telemetry information, telesignaling information, alarm information, and protection action information, providing comprehensive information guarantee for users to monitor and protect the safe operation of the power system. Through these three interfaces, the PC software realizes efficient and accurate data interaction with various test instruments, providing users with comprehensive and in-depth test results and analysis reports, greatly improving the test efficiency and accuracy of the system.

[0076] The PC end of the present invention realizes efficient data interaction with various test instruments by integrating the network security tester interface, relay protection tester interface and 61850 communication interface, provides detailed network security test reports, relay protection test data and comprehensive protection device information, significantly improves the test efficiency and accuracy of the system, and provides strong technical support for users to monitor and protect the safe operation of the power system.

[0077] Embodiment 2

[0078] like Figure 2-3 As shown, according to one embodiment of the present invention, a protection device ring network communication network security testing system includes:

[0079] A bidirectional ring network structure is formed by the network security tester and the protection ring network in the double ring network, wherein the conversion device and the network security tester are connected in series in the protection ring network to form a bidirectional ring structure.

[0080] The conversion device is configured such that conversion device 1 is connected to port 1 of the protection ring network of protection device 1, conversion device 2 is connected to port 2 of the protection ring network of protection device 4, and port 2 of conversion device 1 is connected to port 1 of conversion device 2. Conversion device 1 and conversion device 2 are respectively connected to the network security tester.

[0081] The conversion device realizes the transmission of normal messages in the protection ring network, does not perform any message processing, ensures the normal operation of the protection device, and only forwards the message. It realizes the message transmission between the network security tester and the protection device, including the network security test message can be transmitted to the protection ring network, and the message in the protection ring network can be transmitted to the network security tester.

[0082] The ring network network security test is performed by the network security tester, including the network security tester injecting a network security test message into the conversion device.

[0083] like Figure 4 As shown, the PC software performs data collection, judgment and test result display.

[0084] The present invention, with the help of conversion device 1 and conversion device 2, cleverly integrates the network security tester into the protection ring network in the dual-ring network, constructs a bidirectional ring network structure, ensures that the protection ring network and the startup ring network can still maintain normal operation during the test, and highly simulates the actual operating environment.

[0085] The present invention uses a network security tester to deeply test the network security performance of the protection ring network in the bidirectional ring network structure. By sending test messages to the protection ring network, the network attack scenarios that may be encountered in actual operation are accurately simulated, thereby comprehensively evaluating the security defense capabilities;

[0086] The present invention introduces PC-side software as the core of data processing and analysis, which can efficiently collect and integrate data from network security testers, relay protection testers and protection devices, quickly complete the analysis and judgment of test results, and intuitively display the test results, greatly shortening the confirmation cycle of test data, significantly improving the overall test efficiency, and bringing unprecedented convenience and efficiency to the security testing of the protection device ring network communication network.

[0087] Embodiment 3

[0088] Figure 5 This is a flow chart of a method for testing the security of a ring network communication network of a protection device according to an embodiment of the present invention. Figure 5As shown, according to an embodiment of the present invention, a protection device ring network communication network security testing method adopts any protection device ring network communication network security testing system of the present invention, and the method comprises the following steps:

[0089] Step S102, connecting the network security tester in series into a protection ring network formed by a plurality of protection devices through two conversion devices to form a bidirectional ring network structure;

[0090] Step S104, the network security tester injects a network security test message into the protection ring network through the conversion device;

[0091] Step S106, the PC software obtains the test data of the network security message of the network security tester and judges and displays the test result.

[0092] Preferably, the network security test messages include: network stress messages, network storm messages, network avalanche messages, and network abnormality messages.

[0093] Preferably, the network pressure message includes ARP broadcast, UDP broadcast, and TCP unknown unicast;

[0094] The network storm message includes the ring network storm frame. The ring network storm frame is configured as follows: the message source address uses the device MAC address, the message sequence number changes once every 40ms, and the rest of the content remains unchanged;

[0095] The network avalanche message includes the ring network application frame, which is configured as follows: the message source address uses the device MAC address, the message sequence number increases and flips normally, the switch quantity changes every frame, and other contents remain unchanged;

[0096] Abnormal network messages include unicast and multicast of non-application data, abnormal quality bit identification of sampled data, abnormal transmission of sampled value, repeated frames of equipment, multicast with CRC check error and frame length error, source and destination MAC address error, ring network label error, and APPID error.

[0097] In this embodiment, a protection device ring network communication network security testing method is proposed, and the method is implemented by any system of the present invention. During the implementation process, the network security tester is first connected in series to the protection ring network constructed by multiple protection devices through two conversion devices to form a bidirectional ring network structure. Subsequently, the network security tester uses these conversion devices to inject various types of network security test messages into the protection ring network. These messages include network stress messages (such as ARP broadcast, UDP broadcast, TCP unknown unicast, where the destination MAC is not included in the device MAC address table), network storm messages (including ring network storm frames, whose message source address uses the device MAC address, the message sequence number changes every 40 milliseconds, and the rest of the content remains unchanged), network avalanche messages (including ring network application frames, whose message source address also uses the device MAC address, the message sequence number increases or flips normally, and the switch quantity of each frame changes, and the rest of the content remains unchanged) and network abnormal messages (such as non-application data unicast and multicast, sampled data quality bit identification abnormality, sampled value transmission abnormality, device duplicate frames, CRC check error and frame length error multicast, source and destination MAC address errors, ring network label errors, APPID errors, etc.). The PC software is responsible for receiving and processing the test data sent by the network security tester, conducting in-depth analysis of these data, and then judging the test results, and displaying the results in an intuitive way. The method and system can comprehensively and accurately evaluate the security and stability of the protection device ring network communication network, providing a strong guarantee for the reliable operation of the power system.

[0098] The present invention proposes a method for testing the security of a protection device ring network communication network. A network security tester is connected in series to a protection ring network to form a bidirectional ring network structure. A variety of test messages are injected into the protection ring network through the network security tester. The test data are received and analyzed using PC software. The security and stability of the protection device ring network communication network under normal working conditions are comprehensively and accurately evaluated, providing a solid guarantee for the reliable operation of the power system.

[0099] According to one embodiment of the present invention, the method further comprises:

[0100] During the process of the network security tester sending messages, the relay protection tester is used to apply fault quantity to the protection device 1 to perform protection action.

[0101] In this embodiment, in order to comprehensively evaluate the security and stability of the protection device ring network communication network, while the network security tester sends a test message to the protection ring network, the relay protection tester is used to apply a fault quantity to the protection device 1 to trigger it to perform a protection action. The PC end will obtain and analyze the result data of the relay protection tester in real time to determine whether the experiment of the relay protection tester is successful, that is, whether the protection device can correctly respond to the fault signal. In addition, the PC end also synchronously obtains the result data of each protection device. These data are used to evaluate the operation of the device to ensure that it will not have abnormal phenomena such as misoperation, missending of messages, freezing, and restarting. This comprehensive testing method not only improves the test efficiency and accuracy, but also provides a more solid guarantee for the safe and stable operation of the power system.

[0102] The present invention uses a network security tester and a relay protection tester to apply fault quantities during the security test of the protection ring network communication network, analyzes the test results in real time, comprehensively evaluates the safety and stability of the protection device, effectively avoids abnormal phenomena such as false operation and false message sending, significantly improves the test efficiency and accuracy, and provides a solid guarantee for the safe and stable operation of the power system.

[0103] Embodiment 4

[0104] Figure 6 This is a flow chart of a method for testing the security of a protection device ring network communication network according to another embodiment of the present invention. Figure 6 As shown, according to one embodiment of the present invention, a protection device ring network communication network security testing method is used to improve the efficiency of the protection ring network communication network security testing, using a conversion device to realize the network security tester and the protection ring network in the double ring network to form a bidirectional ring network structure; the network security of the protection ring network protection device in the bidirectional ring network structure is tested by the network security tester; then the PC end software obtains the network security tester, the relay protection tester and the protection device data to judge the test results. The method is applied to any protection device ring network communication network security testing system of the present invention, and specifically includes the following steps:

[0105] Step S100, the network security tester, the conversion device 1, the conversion device 2 and four protection devices form a protection ring network; the four protection devices then form a startup ring network.

[0106] Specifically, step S100 includes:

[0107] Step S110, using the relay protection tester to establish a connection with the protection device 1 to add the fault quantity.

[0108] Step S120: The PC software establishes connections with the network security tester, the relay protection tester, and the four protection devices.

[0109] Step S200: Use a network security tester to inject a network security test message into the protection ring network through a conversion device.

[0110] Specifically, step S200 includes:

[0111] Step S210, when injecting network security messages using a network security tester, start the ring network to maintain normal operation.

[0112] Step S220: The network security tester sends a network stress message to the conversion device, and the injected flow is the port speed limit minus the background flow, and the duration is 2 minutes.

[0113] Specifically, step S220 further includes:

[0114] Step S221, the network security tester sends a network storm message to the conversion device, the message sequence number changes once every 40ms, the rest of the content remains unchanged, the injection flow is 100Mbps, and the duration is 2 minutes;

[0115] Step S222, the network security tester sends a network avalanche message to the conversion device, the network avalanche message includes but is not limited to the ring network application frame, wherein the source address uses the MAC address of the protection device 1, the message sequence number increases and flips normally, the switch quantity changes every frame, and the other contents remain unchanged, the injection flow is 4000 frames / s, and the duration is 2 minutes.

[0116] Step S223, the network security tester sends network abnormality messages to the conversion device. The network abnormality messages include but are not limited to unicast and multicast of non-application data, abnormal quality bit identification of sampled data, abnormal transmission of sampled value, device duplicate frames, multicast with CRC check error and frame length error, source and destination MAC address error, ring network label error, APPID error and other messages. The injected traffic is 100Mbps and the duration is 2 minutes.

[0117] Step S300: During the process of the network security tester sending the message, the relay protection tester is used to apply the fault quantity to the protection device 1 to perform the protection action.

[0118] Step S400: Use PC software to obtain the network security tester, and use these to determine whether the network security tester successfully sends a message.

[0119] Specifically, step S400 includes:

[0120] Step S410, obtaining the result data of the relay protection tester, and judging whether the relay protection tester has successfully conducted the experiment.

[0121] Step S420, obtain the result data of the four protection devices through the 61850 communication interface, and use these to judge the operation status of the device, whether it does not move, does not send messages by mistake, and does not crash, restart or other abnormal phenomena.

[0122] Step S430: After the PC software obtains the data, it sends the data to the data judgment module to judge the data and determine whether the entire test task is successful. Then the judgment result is sent to the result display module.

[0123] The present invention constructs a bidirectional ring network structure, uses a network security tester to simulate various network attack scenarios, combines a relay protection tester to apply fault data, and uses PC software to collect data and make intelligent judgments, thereby significantly improving the efficiency and accuracy of the protection ring network communication network security test and ensuring the stable operation of the protection device in a complex network environment.

[0124] Embodiment 5

[0125] According to one embodiment of the present invention, an electronic device includes a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, any protection device ring network communication network security testing method of the present invention is implemented.

[0126] According to one embodiment of the present invention, a computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, any protection device ring network communication network security testing method of the present invention is implemented.

[0127] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and media can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0128] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features are replaced with (but not limited to) technical features with similar functions disclosed in the present application.

[0129] It should be understood that the size of the serial numbers of each step in the content of the invention and the embodiments of the present invention does not absolutely mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

Claims

1. A protection device ring network communication network security testing system, characterized in that: The system includes: N protection devices, a conversion device 1, a network security tester, and a conversion device 2 connected to each other; Each protection device has four ports: ports 1 and 2 are protection ring network ports, ports 3 and 4 are start-up ring network ports; The N protection devices are connected to each other through their respective start-up ring network ports to form a start-up ring network; wherein the protection device 1 and the protection device N are adjacent nodes in the start-up ring network; The conversion device 1 is connected to port 1 of the protection device 1, and the conversion device 2 is connected to port 2 of the protection device N; the two conversion devices connect the ends of the protection ring network formed by the N protection devices to form a bidirectional ring network structure; The conversion device 1 and the conversion device 2 are used to realize transparent transmission of normal messages in the protection ring network; The network security tester is used to test the network security of protection devices in a protection ring network.

2. The protection device ring network communication network security testing system according to claim 1 is characterized in that: The system also includes: a PC terminal; The PC is connected to the network security tester, and is used to obtain test data and to judge and display test results.

3. The protection device ring network communication network security testing system according to claim 2 is characterized in that: The system also includes: a relay protection tester; The relay protection tester is used to apply a fault quantity to the protection device 1; The PC end is connected to the relay protection tester, and the PC end is also used to obtain test data of the relay protection tester and judge and display the test results.

4. The protection device ring network communication network security testing system according to claim 2 is characterized in that: The PC terminal includes: an interface module, a data judgment module, and a judgment result display module; The interface module is used to connect with the test instruments and obtain the test data of each test instrument; The data judgment module is used to judge the test data and obtain the test results; The judgment result display module is used to display the test result.

5. The protection device ring network communication network security testing system according to claim 4 is characterized in that: The interface module comprises: A network security tester interface, used to connect to the network security tester and obtain test data of network security messages from the network security tester; A relay protection tester interface, used to connect to the relay protection tester and obtain test data of the relay protection test from the relay protection tester; 61850 communication interface, used to obtain protection information data of the protection device.

6. A protection device ring network communication network security testing method, using the protection device ring network communication network security testing system according to any one of claims 1 to 5, characterized in that: The method comprises the following steps: The network security tester is connected in series to a protection ring network formed by multiple protection devices through two conversion devices to form a bidirectional ring network structure; The network security tester injects a network security test message into the protection ring network through the conversion device; The PC software obtains the test data of the network security message of the network security tester and judges and displays the test results.

7. The method for testing the security of the ring network communication network of the protection device according to claim 6, characterized in that: The network security test messages include: network stress messages, network storm messages, network avalanche messages, and network abnormality messages.

8. The method for testing the security of the ring network communication network of the protection device according to claim 7, characterized in that: The network pressure messages include ARP broadcast, UDP broadcast, and TCP unknown unicast; The network storm message includes a ring network storm frame, and the ring network storm frame is configured as follows: the message source address uses the device MAC address, the message sequence number changes once every 40ms, and the rest of the content remains unchanged; The network avalanche message includes a ring network application frame, and the ring network application frame is configured as follows: the message source address uses the device MAC address, the message sequence number increases and flips normally, the switch quantity changes every frame, and other contents remain unchanged; The network abnormal messages include unicast and multicast of non-application data, abnormal sampling data quality bit identification, abnormal sampling value transmission, device duplicate frames, CRC check errors and multicast with frame length errors, source and destination MAC address errors, ring network label errors, and APPID errors.

9. The method for testing the security of the ring network communication network of the protection device according to claim 6, characterized in that: The method further comprises: During the process of the network security tester sending the message, the relay protection tester is used to apply the fault quantity to the protection device 1 to perform the protection action.

10. An electronic device, characterized in that: It includes a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the protection device ring network communication network security testing method as described in any one of claims 6 to 9 is implemented.

Images