Photovoltaic station 5G network security protection system

Abstract

The invention relates to the technical field of network security protection, and discloses a photovoltaic station 5G network security protection system, which comprises a 5G network security module, the 5G network security module comprises a risk evaluation module, a protection system module and a data transmission module, the risk evaluation module performs construction drilling based on a chaos engineering theory, and the protection system module performs data transmission based on the chaos engineering theory. The risk assessment module is connected with a data acquisition module, the data acquisition module and the protection system module are constructed based on a digital immune technology, and the data transmission module constructs a data transmission channel based on a framework of an endogenous safety protection model. According to the invention, the network security protection model is constructed, then the terminal monitoring module monitors the abnormal behavior of the terminal after the access of the 5G access module, and a protection system is constructed, so that the problems of weak 5G security protection capability and insufficient risk management and control means of the current photovoltaic station are solved.

Description

Technical Field

[0001] The present invention relates to the field of network security protection technology, and in particular to a 5G network security protection system for a photovoltaic station. Background Art

[0002] At present, the photovoltaic industry uses 4G, Mesh and other wireless networks for data transmission mainly for services such as on-site video surveillance and security management. These do not fall within the scope of power monitoring systems and have relatively low security requirements. The current mainstream 4G+VPN method for distributed inverter data collection has not been formally approved by regulatory authorities.

[0003] At present, photovoltaic power stations mainly use traditional fiber optic communication methods to realize the transmission of business data within the station. Due to factors such as plateau terrain and construction conditions, the construction cost is relatively high. Due to the harsh operating environment, there are many fiber optic defects after years of operation. There is a possibility that an interruption at a certain point will cause all data to be interrupted, causing the equipment to be in an uncontrollable state, posing a safety risk. Optical cable defects are difficult to find, and fault points are difficult to locate and eliminate. After the optical cable in the photovoltaic field is built once, the subsequent scalability is poor.

[0004] With the continuous innovation of wireless network technology, the security of communication network technology has been greatly improved. Inverters and box transformers in photovoltaic application scenarios belong to the first security zone business system of the power monitoring system, with the highest security level. Compared with the current 4G, Wifi, Mesh and other networks, the security performance of 5G meets the overall requirements of the power monitoring system "security partitioning, network dedicated, horizontal isolation, and vertical authentication", making 5G the best choice for ensuring the security of the communication wireless network of the power monitoring system. Therefore, a 5G network security protection system for photovoltaic stations is proposed. Summary of the invention

[0005] 1. Technical issues to be resolved

[0006] In view of the shortcomings of the existing technology, the present invention provides a 5G network security protection system for photovoltaic stations, which provides a safe and reliable wireless network foundation for the intelligent construction of photovoltaics. At the same time, it replaces the traditional fiber optic communication method, reduces the cost of wired network construction in the site, reduces the subsequent fiber optic communication operation and maintenance costs, and improves communication reliability.

[0007] (II) Technical solution

[0008] In order to achieve the above object, the present invention adopts the following technical solutions:

[0009] A 5G network security protection system for a photovoltaic station includes a 5G network security module, wherein the 5G network security module includes a risk assessment module, a protection system module, and a data transmission module. The risk assessment module is constructed and drilled based on chaos engineering theory, and the risk assessment module is connected to a data acquisition module. The data acquisition module, the protection system module is constructed based on digital immune technology, and the data transmission module constructs a data transmission channel based on the framework of an endogenous security protection model. The protection system module includes a model construction module, a 5G access module, and a terminal monitoring module. The model construction module constructs a network security protection model, and then after the 5G access module is accessed, the terminal abnormal behavior is monitored by the terminal monitoring module to construct a protection system.

[0010] Furthermore, the risk assessment module assesses the following objects: 5G slice security, wireless isolation, bearer network isolation, core network isolation, 5G interface security, power business security, terminal access security, and terminal behavior security, thereby establishing a 5G network security assessment baseline for photovoltaic sites from multiple angles.

[0011] On the basis of the above-mentioned scheme, the risk assessment module uses the principles of chaos engineering when constructing drills based on chaos engineering theory to conduct dynamic assessments of attack and defense confrontations in 5G photovoltaic scenarios, while conducting normalized risk testing and evaluation.

[0012] As a further solution of the present invention, the risk assessment module first evaluates the 5G existing network of the photovoltaic site and then conducts a 5G photovoltaic laboratory evaluation.

[0013] Furthermore, the risk assessment module includes 5G network element compliance risk gaps, photovoltaic site network compliance risk analysis and 5G photovoltaic power generation application compliance risk analysis.

[0014] On the basis of the above-mentioned scheme, the risk assessment module develops a red and blue attack and defense drill system based on chaos engineering theory. Specifically, it simulates traffic to simulate various fault scenarios to attack the business system, and simulates 5G signaling and abnormal traffic in the existing photovoltaic station network based on automated testing tools to simulate and verify the 5G power virtual private network, thereby solidifying the 5G risk scenarios of photovoltaic stations.

[0015] Furthermore, when applying the chaos engineering theory, a chaos model must first be established: through chaos theory and technology, domain knowledge is embedded to establish a chaos model of the photovoltaic station 5G application system. When establishing the chaos model, it includes collecting data, determining system state variables, establishing dynamic equations, analyzing chaos characteristics, and verifying model accuracy.

[0016] As a further solution of the present invention, after the device accesses the 5G network, the protection system module uses multiple dimensions such as SIM card, IP address, and URL to cooperate with the 5G firewall to perform detailed access management and record access information. The protection system module conducts in-depth analysis of abnormal traffic in the 5G power virtual private network, identifies abnormal behavior, and sends alarms to the 5G network security situation awareness platform to filter and reduce noise on the alarm information.

[0017] On the basis of the above scheme, the protection system module includes security control strategies, including encryption algorithms, access control mechanisms, and security authentication.

[0018] The beneficial effects of the present invention are:

[0019] 1. In the present invention, the risk assessment module can identify as many risks as possible before the abnormal behavior of the system is triggered, and then carry out targeted reinforcement and prevention, so as to avoid the serious consequences caused by the occurrence of failures.

[0020] 2. In the present invention, threats can be predicted and neutralized before they cause significant harm, thereby contributing to the construction of a future-oriented digital environment. Through a unified future network security framework and network architecture design, security requirements from network elements, network functions to business application systems can be met.

[0021] 3. In the present invention, the model construction module constructs a network security protection model, and then after the 5G access module is connected, the terminal abnormal behavior is monitored by the terminal monitoring module to build a protection system to solve the problem that the current photovoltaic station 5G security protection capability is weak and the risk control measures are insufficient.

[0022] 4. In the present invention, the principles of chaos engineering are used to construct drills based on chaos engineering theory, and dynamic evaluation is performed on the attack and defense confrontation of 5G photovoltaic scenarios. At the same time, normalized risk testing and evaluation are carried out. In this way, normalized risk testing and evaluation are implemented to identify and reveal the real 5G network security risks.

[0023] 5. In the present invention, a chaotic model describing the dynamic behavior of the 5G application system of the photovoltaic station can be established to analyze the security risks of the system. Such a model can help identify potential security vulnerabilities and risk points in the system and provide a basis for formulating security control strategies. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 This is a schematic diagram of the system framework process structure of a 5G network security protection system for photovoltaic stations proposed in the present invention. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. It should be noted that, unless otherwise clearly specified and limited, the terms "installation", "connection" and "setting" should be understood in a broad sense. For ordinary technicians in this field, the specific meanings of the above terms in this patent can be understood according to specific circumstances.

[0026] Example 1

[0027] Reference Figure 1 A 5G network security protection system for a photovoltaic station includes a 5G network security module, which includes a risk assessment module, a protection system module, and a data transmission module. The risk assessment module is constructed and drilled based on the chaos engineering theory. Through the risk assessment module, as many risks as possible can be identified before the abnormal behavior of the system is triggered, and then targeted reinforcement and prevention can be carried out to avoid the serious consequences caused by the failure. The risk assessment module is connected with a data acquisition module. The data acquisition module and the protection system module are constructed based on digital immune technology, which can predict and neutralize the threat before it causes major damage, thereby contributing to the construction of a future-oriented digital environment. The data transmission module constructs a data transmission channel based on the framework of an endogenous security protection model. Through a unified future network security framework and network architecture design, the security requirements from network elements, network functions to business application systems are met. The protection system module includes a model construction module, a 5G access module, and a terminal monitoring module. The model construction module constructs a network security protection model, and then the 5G access module monitors the abnormal behavior of the terminal through the terminal monitoring module after access, and constructs a protection system to solve the current problems of weak 5G security protection capabilities and insufficient risk control measures in photovoltaic stations.

[0028] In the present invention, the risk assessment module assesses the following objects: 5G slicing security, wireless isolation, bearer network isolation, core network isolation, 5G interface security, power business security, terminal access security, and terminal behavior security. A 5G network security assessment baseline for photovoltaic stations is established from multiple angles. The risk assessment module uses the principles of chaos engineering when constructing drills based on chaos engineering theory to dynamically assess the attack and defense confrontation of 5G photovoltaic scenarios, and conducts normalized risk testing and evaluation at the same time. In this way, normalized risk testing and evaluation are implemented to identify and reveal the real 5G network security risks. When the risk assessment module conducts an evaluation, it first evaluates the 5G existing network of the photovoltaic station, and then conducts a 5G photovoltaic laboratory evaluation.

[0029] Example 2

[0030] Reference Figure 1A 5G network security protection system for a photovoltaic station includes a 5G network security module, which includes a risk assessment module, a protection system module, and a data transmission module. The risk assessment module is constructed and drilled based on the chaos engineering theory. Through the risk assessment module, as many risks as possible can be identified before the abnormal behavior of the system is triggered, and then targeted reinforcement and prevention can be carried out to avoid the serious consequences caused by the failure. The risk assessment module is connected with a data acquisition module. The data acquisition module and the protection system module are constructed based on digital immune technology, which can predict and neutralize the threat before it causes major damage, thereby contributing to the construction of a future-oriented digital environment. The data transmission module constructs a data transmission channel based on the framework of an endogenous security protection model. Through a unified future network security framework and network architecture design, the security requirements from network elements, network functions to business application systems are met. The protection system module includes a model construction module, a 5G access module, and a terminal monitoring module. The model construction module constructs a network security protection model, and then the 5G access module monitors the abnormal behavior of the terminal through the terminal monitoring module after access, and constructs a protection system to solve the current problems of weak 5G security protection capabilities and insufficient risk control measures in photovoltaic stations.

[0031] In the present invention, the risk assessment module assesses the following objects: 5G slicing security, wireless isolation, bearer network isolation, core network isolation, 5G interface security, power business security, terminal access security, and terminal behavior security. A 5G network security assessment baseline for photovoltaic stations is established from multiple angles. The risk assessment module uses the principles of chaos engineering when constructing drills based on chaos engineering theory to dynamically assess the attack and defense confrontation of 5G photovoltaic scenarios, and conducts normalized risk testing and evaluation at the same time. In this way, normalized risk testing and evaluation are implemented to identify and reveal the real 5G network security risks. When the risk assessment module conducts an evaluation, it first evaluates the 5G existing network of the photovoltaic station, and then conducts a 5G photovoltaic laboratory evaluation.

[0032] In particular, the risk assessment module includes 5G network element compliance risk gaps, photovoltaic station network compliance risk analysis and 5G photovoltaic power generation application compliance risk analysis. The risk assessment module develops a red-blue attack and defense drill system based on chaos engineering theory. Specifically, it simulates traffic to simulate various fault scenarios to attack the business system. In the photovoltaic station network, 5G signaling and abnormal traffic are simulated and verified based on automated testing tools to solidify the 5G risk scenarios of photovoltaic stations. Under the premise of ensuring minimal impact on production business, the 5G application security risks of photovoltaic stations are evaluated in a real environment using a variety of events. Chaos engineering theory is used in When applying, we must first establish a chaos model: through chaos theory and technology, embed domain knowledge, and establish a chaos model of the photovoltaic station 5G application system to describe the complexity and uncertainty of the system, which helps to better understand the behavior of the system and potential security risks. When establishing a chaos model, it includes collecting data, determining system state variables, establishing dynamic equations, analyzing chaotic characteristics, and verifying model accuracy. Through these steps, we can establish a chaos model that describes the dynamic behavior of the photovoltaic station 5G application system, which is used to analyze the security risks of the system. Such a model can help identify potential security vulnerabilities and risk points in the system, and provide a basis for formulating security control strategies.

[0033] After the device is connected to the 5G network, the protection system module uses multiple dimensions such as SIM card, IP address, and URL to cooperate with the 5G firewall to perform detailed access management and record access information. The protection system module conducts in-depth analysis of abnormal traffic in the 5G power virtual private network, identifies abnormal behavior, and sends alarms to the 5G network security situation awareness platform to filter and reduce the noise of the alarm information. The protection system module includes security control strategies, including encryption algorithms, access control mechanisms, and security authentication.

[0034] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A 5G network security protection system for a photovoltaic station, including a 5G network security module, characterized in that: The 5G network security module includes a risk assessment module, a protection system module, and a data transmission module. The risk assessment module is constructed and drilled based on chaos engineering theory. The risk assessment module is connected to a data acquisition module. The protection system module is constructed based on digital immune technology. The data transmission module constructs a data transmission channel based on the framework of an endogenous security protection model. The protection system module includes a model construction module, a 5G access module, and a terminal monitoring module. The model construction module constructs a network security protection model. After the 5G access module is accessed, the terminal monitoring module monitors abnormal terminal behavior to construct a protection system.

2. A photovoltaic station 5G network security protection system according to claim 1, characterized in that: The risk assessment module assesses the following objects: 5G slicing security, wireless isolation, bearer network isolation, core network isolation, 5G interface security, power business security, terminal access security, and terminal behavior security, and establishes a 5G network security assessment baseline for photovoltaic sites from multiple angles.

3. A photovoltaic station 5G network security protection system according to claim 1, characterized in that: The risk assessment module uses the principles of chaos engineering when constructing drills based on chaos engineering theory to dynamically assess the attack and defense confrontation of 5G photovoltaic scenarios, while also conducting normalized risk testing and evaluation.

4. A photovoltaic station 5G network security protection system according to claim 3, characterized in that: When the risk assessment module conducts an assessment, it first conducts an assessment of the 5G live network of the photovoltaic site, and then conducts an assessment of the 5G photovoltaic laboratory.

5. A photovoltaic station 5G network security protection system according to claim 1, characterized in that: The risk assessment module includes 5G network element compliance risk gaps, photovoltaic site network compliance risk analysis and 5G photovoltaic power generation application compliance risk analysis.

6. A photovoltaic station 5G network security protection system according to claim 3, characterized in that: The risk assessment module develops a red and blue attack and defense drill system based on chaos engineering theory. Specifically, it simulates traffic to simulate various fault scenarios to attack the business system, simulates 5G signaling and abnormal traffic in the existing photovoltaic station network based on automated testing tools to simulate and verify the 5G power virtual private network, and solidifies the 5G risk scenarios of photovoltaic stations.

7. A photovoltaic station 5G network security protection system according to claim 6, characterized in that: When applying the chaos engineering theory, the first step is to establish a chaos model: through chaos theory and technology, domain knowledge is embedded to establish a chaos model of the photovoltaic station 5G application system. When establishing the chaos model, it includes collecting data, determining system state variables, establishing dynamic equations, analyzing chaos characteristics, and verifying model accuracy.

8. A photovoltaic station 5G network security protection system according to claim 6, characterized in that: After the device is connected to the 5G network, the protection system module uses multiple dimensions such as SIM card, IP address, and URL to cooperate with the 5G firewall to perform detailed access management and record access information. The protection system module conducts in-depth analysis of abnormal traffic in the 5G power virtual private network, identifies abnormal behavior, and sends alarms to the 5G network security situation awareness platform to filter and reduce the noise of the alarm information.

9. A photovoltaic station 5G network security protection system according to claim 6, characterized in that: The protection system module includes security control strategies, including encryption algorithms, access control mechanisms, and security authentication.

Images