Implementation method and implementation device for real-time simulation platform of electric power information physical system

Abstract

The invention is suitable for the technical field of modeling simulation, and provides a realization method and a realization device for a real-time simulation platform of an electric power information physical system, and the method comprises the steps: building an electric power system simulation model through employing Simulink, RT-LAB software and an OPAL-RT real-time simulation machine, and achieving the real-time simulation of an electric power system; in an OMNet + + environment, an INET model library is adopted to construct a communication system simulation model, and a network topology structure and a communication protocol of the communication system are configured; building a real-time simulation platform of the electric power information physical system based on the electric power system simulation model, the communication system simulation model and an SCADA (supervisory control and data acquisition) system; in a real-time simulation platform of an electric power information physical system, data transmission among an electric power system simulation model, a communication system simulation model and an SCADA (Supervisory Control and Data Acquisition) system is realized based on a strategy routing mechanism; in the real-time simulation platform of the electric power information physical system, the attack model and the protection model are integrated in the communication simulation environment, and the security of the electric power system is verified based on the attack model and the protection model, so that the expandability of the simulation platform is improved.

Description

Technical Field

[0001] The present application belongs to the field of modeling and simulation technology, and in particular, relates to an implementation method and an implementation device of a real-time simulation platform for an electric power information-physical system. Background Art

[0002] With the development of smart grid technology and the physical information system of the power grid, the integration of power systems and communication networks is becoming increasingly close. Power communication has become an important infrastructure of modern power grids and an important means to ensure the safe, stable and economical operation of power grids.

[0003] At present, there are many ways to build the real-time simulation platform of power information-physical system. The most common way is to use Simulink for power system modeling, RT-LAB for real-time simulation management, OPAL-RT simulator as real-time simulator, and EXata or OPNET for network communication simulation. However, in this way, all related software are expensive commercial software, and the commercial network communication simulation software has set the communication equipment model and security model. Users cannot add or adjust according to actual needs, resulting in poor scalability.

[0004] Therefore, how to improve the scalability of the real-time simulation platform of the power cyber-physical system has become an urgent problem to be solved. Summary of the invention

[0005] The embodiments of the present application provide a method and device for implementing a real-time simulation platform for an electric power information-physical system, aiming to improve the scalability of the real-time simulation platform for an electric power information-physical system.

[0006] In the first aspect, an embodiment of the present application provides a method for implementing a real-time simulation platform for an electric power information-physical system, the method comprising: using Simulink, RT-LAB software and OPAL-RT real-time simulator to construct a power system simulation model and realize real-time simulation of the power system; in the OMNet++ environment, using the INET model library to construct a communication system simulation model, and configuring the network topology and communication protocol of the communication system; building an electric power information-physical system real-time simulation platform based on the power system simulation model, the communication system simulation model and the SCADA system; in the electric power information-physical system real-time simulation platform, based on a policy routing mechanism, realizing data transmission between the power system simulation model, the communication system simulation model and the SCADA system; in the electric power information-physical system real-time simulation platform, integrating attack models and protection models in a communication simulation environment, and verifying the security of the power system based on the attack model and the protection model.

[0007] In a possible implementation, in the electric power information-physical system real-time simulation platform, based on a policy routing mechanism, data transmission between the electric power system simulation model, the communication system simulation model and the SCADA system is realized, including: connecting a first device, a second device and a third device via Ethernet, and respectively configuring IP addresses as a first IP address, a second IP address and a third IP address, wherein the first device, the second device and the third device are devices for deploying an OPAL-RT real-time simulator, a SCADA system and OMNet++ software, respectively; in the third device, creating a first virtual network node and a second virtual network node in the communication system simulation model, configuring IP addresses as a fourth IP address and a fifth IP address, respectively, and establishing a mapping between the first IP address and the fourth IP address and a mapping between the second IP address and the fifth IP address in the communication system simulation model; based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address, the policy routing mechanism is adopted to realize data transmission between the electric power system simulation model, the communication system simulation model and the SCADA system.

[0008] In a possible implementation, the policy routing mechanism is used to implement data transmission between the power system simulation model, the communication system simulation model and the SCADA system based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address, including: taking the third IP address as the next hop address, configuring a first static routing rule on the first device and configuring a second static routing rule on the second device, the first static routing rule being used to implement the transmission of data generated by the first device to the third device, and the second static routing rule being used to implement the transmission of data generated by the second device to the third device; creating a first TAP device and a second TAP device in the third device, and configuring the IP addresses of the first TAP device and the second TAP device as a sixth IP address and a seventh IP address, respectively; on the third device, configuring a first policy routing based on the source IP based on the first IP address and creating a first policy routing table, and in the first policy routing table, using the sixth IP address as the next hop address, configure a third static routing rule, based on the first policy routing, the first policy routing table and the third static routing rule, to realize routing of data from the first device to the first TAP device; on the third device, configure a second policy routing based on the source IP based on the second IP address and create a second policy routing table, in the second policy routing table, use the seventh IP address as the next hop address, configure a fourth static routing rule, based on the second policy routing, the second policy routing table and the fourth static routing rule, to realize routing of data from the second device to the second TAP device; based on the first IP address and the fourth IP address, configure a first network address conversion of the first virtual network node, the first network address conversion is used to realize conversion between the first IP address and the fourth IP address; based on the second IP address and the fifth IP address, configure a second network address conversion of the second virtual network node, the second network address conversion is used to realize conversion between the second IP address and the fifth IP address.

[0009] In a possible implementation, in the real-time simulation platform of the electric power information-physical system, an attack model and a protection model are integrated in a communication simulation environment, and the security of the power system is verified based on the attack model and the protection model, including: setting simulation parameters, the simulation parameters including the time, method, intensity of the attack, and the deployment and configuration of protection measures; running simulation to simulate the operation of the power system and to simulate security events in the network based on the attack model; collecting simulation data, the simulation data including the behavior and response of the power system based on the protection model when attacked; and adjusting the parameters of the attack model and the protection model according to the simulation data.

[0010] In a possible implementation, the method further includes: using NS-3 simulation software to construct the communication system simulation model.

[0011] In a possible implementation, the method further includes: selecting a cloud service platform; and deploying a simulation environment based on the cloud service platform.

[0012] In one possible implementation, the attack model is one or more of denial of service attack, distributed denial of service attack, malware propagation, phishing attack, internal attack and advanced persistent threat; the protection model is one or more of firewall, intrusion detection system, intrusion prevention system, security information and event management, encryption and authentication mechanism and network isolation and segmentation.

[0013] In the second aspect, an embodiment of the present application provides an implementation device of a real-time simulation platform for an electric power information-physical system, the device comprising: a first model building module, used to use Simulink, RT-LAB software and OPAL-RT real-time simulator to build a power system simulation model and realize real-time simulation of the power system; a second model building module, used to use the INET model library to build a communication system simulation model in the OMNet++ environment, and configure the network topology and communication protocol of the communication system; a simulation platform building module, used to build a real-time simulation platform for an electric power information-physical system based on the power system simulation model, the communication system simulation model and the SCADA system; a data transmission setting module, used to realize data transmission between the power system simulation model, the communication system simulation model and the SCADA system based on a policy routing mechanism in the real-time simulation platform for the electric power information-physical system; a security verification module, used to integrate attack models and protection models in the communication simulation environment in the real-time simulation platform for the electric power information-physical system, and verify the security of the power system based on the attack model and the protection model.

[0014] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the method described in the first aspect or any one of the implementation methods thereof is implemented.

[0015] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect or any one of the implementation methods thereof is implemented.

[0016] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the method described in the first aspect or any one of the implementation methods thereof.

[0017] Compared with the prior art, the embodiments of the present application have the following beneficial effects: using open source simulation software such as RT-LAB, OPAL-RT real-time simulator and OMNet++ to build power system simulation models and communication system simulation models, and perform real-time joint simulation; building a real-time simulation platform for power information-physical systems based on power system simulation models, communication system simulation models and SCADA systems; in the real-time simulation platform for power information-physical systems, based on the policy routing mechanism, realizing data transmission between power system simulation models, communication system simulation models and SCADA systems, and integrating attack models and protection models in the communication simulation environment, and verifying the security of the power system based on attack models and protection models. Compared with using commercial software such as EXata or OPNET to build a simulation platform, using open source simulation software not only reduces the construction cost, but also improves the scalability of the simulation platform, enabling users to perform secondary development according to actual needs, and improving user experience.

[0018] It can be understood that the implementation device, electronic device, computer-readable storage medium and computer program product of the real-time simulation platform of electric power information physical system provided in the embodiment of the present application have the same beneficial effects as the implementation method of the real-time simulation platform of electric power information physical system mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0020] Figure 1A flowchart of a method for implementing a real-time simulation platform for an electric power cyber-physical system provided in one embodiment of the present application;

[0021] Figure 2 A schematic diagram of a power system simulation model provided in one embodiment of the present application;

[0022] Figure 3 A schematic diagram of a communication system simulation model provided by an embodiment of the present application;

[0023] Figure 4 A schematic diagram of a simulation test bench of a real-time simulation platform for an electric power cyber-physical system provided in one embodiment of the present application;

[0024] Figure 5 A structural block diagram of an implementation device of a real-time simulation platform for an electric power cyber-physical system provided in one embodiment of the present application;

[0025] Figure 6 A schematic diagram of the structure of an electronic device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0026] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0027] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0028] It should also be understood that the term “and / or” used in the specification and appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0029] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0030] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0031] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0032] With the development of smart grid technology and the physical information system of the power grid, the integration of power systems and communication networks is becoming increasingly close. Power communication has become an important infrastructure of modern power grids and an important means to ensure the safe, stable and economical operation of power grids.

[0033] At present, there are many solutions for building the real-time simulation platform of power information-physical system. The two commonly used solutions are shown in Table 1:

[0034] Table 1

[0035]

[0036] The above two solutions have the following main disadvantages:

[0037] 1. All relevant software is expensive commercial software, and the device models of some network communication simulation software (such as EXata) are not open to domestic users for authorization and purchase channels, which greatly limits the application of real-time simulation of power information-physical systems in terms of scenario coverage.

[0038] 2. Existing commercial network communication simulation software has limitations in secondary development capabilities. When users verify the impact of new communication technologies or safety measures on power systems, they are often restricted by the development and expansion capabilities of the software itself.

[0039] In order to solve the above technical problems, the present application provides an implementation method of a real-time simulation platform for an electric power information-physical system, which adopts Simulink, RT-LAB software and OPAL-RT real-time simulator to construct a power system simulation model and realize real-time simulation of the power system; in the OMNet++ environment, the INET model library is used to construct a communication system simulation model, and the network topology and communication protocol of the communication system are configured; based on the power system simulation model, the communication system simulation model and the SCADA system, a real-time simulation platform for an electric power information-physical system is built; in the real-time simulation platform for an electric power information-physical system, based on a policy routing mechanism, data transmission between the power system simulation model, the communication system simulation model and the SCADA system is realized; in the real-time simulation platform for an electric power information-physical system, an attack model and a protection model are integrated in a communication simulation environment, and the security of the power system is verified based on the attack model and the protection model, thereby reducing the cost of building the simulation platform and improving the scalability of the simulation platform, so that users can perform secondary development according to actual needs and improve user experience.

[0040] For ease of understanding, the technical solution of the present application will be described in detail below with reference to the accompanying drawings.

[0041] Figure 1 The flowchart of a method for implementing a real-time simulation platform for an electric power information-physical system provided in one embodiment of the present application is shown. For ease of explanation, only the part related to the present embodiment is shown. The method provided in the present embodiment includes the following steps:

[0042] S110 uses Simulink, RT-LAB software and OPAL-RT real-time simulator to build a power system simulation model and realize real-time simulation of the power system.

[0043] Specifically, Simulink is a block diagram environment for multi-domain simulation and model-based design. It supports system design, simulation, automatic code generation, and continuous testing and verification of embedded systems. Simulink provides a graphical editor, a customizable module library, and a solver that can model and simulate dynamic systems.

[0044] Specifically, the OPAL-RT real-time simulator is widely used in the development and testing of power electronics, energy systems, and control systems. Its system can run large-scale physical models in real time through the combination of high-performance computing hardware and simulation software, thereby realizing hardware-in-the-loop (HIL) and software-in-the-loop (SIL) simulation.

[0045] Specifically, RT-LAB real-time simulation management software is the host software of OPAL-RT real-time simulator. RT-LAB is integrated with MATLAB / Simulink to provide users with real-time synchronization, user interface, real-time hardware interface and data interaction to provide a seamless distributed computing execution platform.

[0046] In the specific implementation, Figure 2 As shown in the figure, Simulink is used to build a power system simulation model, and the model components include but are not limited to generators, transformers, transmission lines, etc. The built power system simulation model is executed on the OPAL-RT real-time simulator through RT-LAB software to realize real-time simulation of the power system.

[0047] S120, in the OMNet++ environment, uses the INET model library to build a communication system simulation model, and configures the network topology and communication protocol of the communication system.

[0048] Specifically, the Objective Modular Network Test Bed in C++ (OMNet++) is an open source multi-protocol network simulation software. As an open network simulation platform based on component modularization, it has a complete graphical interface and an embeddable simulation kernel, and can be used for simulation of distributed systems and communication networks.

[0049] Specifically, INET is a commonly used network protocol and component model library on the OMNet++ platform, covering a variety of protocols and technologies from the network layer to the application layer. Its main functions and features include Internet stack models, such as Transmission Control Protocol (TCP), User Datagram Protocol (UDP), Internet Protocol Version 4 (IPv4), Internet Protocol Version 6 (IPv6), Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), etc.; including wired and wireless link layer protocols, such as Ethernet, Point-to-Point Protocol (PPP), Institute of Electrical and Electronics Engineers (IEEE) 802.11, etc.; INET also contains some high-level application protocol models that can help simulate the traffic behavior of actual network applications, such as HyperText Transfer Protocol (HTTP), File Transfer Protocol (FTP), etc.

[0050] In the specific implementation, Figure 3 As shown, in the OMNet++ environment, the INET model library is used to build a communication system simulation model, including but not limited to network components such as routers, switches, and terminal devices, and then the network topology and communication protocol are configured to simulate different network communication scenarios.

[0051] S130, builds a real-time simulation platform for the power information-physical system based on the power system simulation model, the communication system simulation model and the SCADA system.

[0052] Specifically, Supervisory Control And Data Acquisition (SCADA) is a computer-based distributed control system (DCS) and power automation monitoring system.

[0053] In the specific implementation, the power system simulation model, the communication system simulation model and the SCADA system are connected via Ethernet to build a real-time simulation platform for the power information-physical system.

[0054] S140, in the real-time simulation platform of the electric power cyber-physical system, based on the policy routing mechanism, realize data transmission between the electric power system simulation model, the communication system simulation model and the SCADA system.

[0055] In the specific implementation, the data stream generated by the power system simulation model in the OPAL-RT real-time simulator and the control instruction data generated by the SCADA system are directly routed to the OMNet++ host as IP packets through the Linux policy routing mechanism, and are transparently mapped to the virtual network nodes in OMNet++ to achieve seamless connection between the power system and the communication system and ensure smooth data transmission.

[0056] S150, in the real-time simulation platform of the electric power cyber-physical system, an attack model and a protection model are integrated in a communication simulation environment, and the security of the electric power system is verified based on the attack model and the protection model.

[0057] Specifically, OMNeT++ adopts a modular design. Each component in the simulation (such as network equipment, protocol stack, etc.) is encapsulated into an independent module. It also provides a rich application programming interface (API) and library to support the simulation of multiple network protocols and components. Based on the design framework of OMNeT++, it is very convenient to build and add customized network security attack models and protection models unique to the power grid system. By configuring the simulation environment to simulate specific network attack scenarios, the secure communication mechanism between the power system and the communication system can be verified.

[0058] As an example, attack models include, but are not limited to, denial of service attacks, distributed denial of service attacks, malware propagation, phishing attacks, insider attacks, and advanced persistent threats.

[0059] For example, a denial of service (DoS) attack simulates an attacker making the communication network or control center of the power system unavailable through flood attacks, resource exhaustion, etc.; a distributed denial of service (DDoS) attack simulates a large number of distributed attackers launching attacks on the power system at the same time to overwhelm network equipment and servers; malware propagation simulates the spread of malware such as worms and viruses in the internal network of the power system, affecting the normal operation of the system; a phishing attack simulates an attacker disguising himself as a legitimate entity to trick users into revealing login credentials or other sensitive information; an internal attack simulates an internal person abusing his authority to damage the power system or leak data; an advanced persistent threat (APT) simulates a complex and organized attacker lurking in the network for a long time to conduct covert reconnaissance and attacks.

[0060] As an example, protection models include, but are not limited to, firewalls, intrusion detection systems, intrusion prevention systems, security information and event management, encryption and authentication mechanisms, and network isolation and segmentation.

[0061] For example, firewalls filter network traffic to block unauthorized access and malicious traffic; intrusion detection systems (IDS) monitor network traffic to detect and alert potential attacks; intrusion prevention systems (IPS) automatically take measures to block attacks when attacks are detected; security information and event management (SIEM) collects and analyzes security events to provide visualization and management of security threats; encryption and authentication mechanisms simulate the use of encryption technology to protect the security of data transmission, and the use of authentication mechanisms to ensure the source and integrity of data; network isolation and segmentation simulates the physical or logical segmentation of critical networks to limit the spread of attacks.

[0062] The technical solution provided in this application uses open source simulation software such as RT-LAB, OPAL-RT real-time simulator and OMNet++ to build power system simulation models and communication system simulation models, and conduct real-time joint simulation; build a real-time simulation platform for power information-physical system based on the power system simulation model, communication system simulation model and SCADA system; in the real-time simulation platform for power information-physical system, based on the policy routing mechanism, realize data transmission between the power system simulation model, communication system simulation model and SCADA system, integrate attack models and protection models in the communication simulation environment, and verify the security of the power system based on attack models and protection models. Compared with using commercial software such as EXata or OPNET to build a simulation platform, the use of open source simulation software not only reduces the construction cost, but also improves the scalability of the simulation platform, allowing users to carry out secondary development according to actual needs, and improving user experience.

[0063] Based on the above embodiments, this embodiment further illustrates and optimizes the technical solution. Specifically, in this embodiment, in the real-time simulation platform of the electric power information-physical system, based on the policy routing mechanism, data transmission between the power system simulation model, the communication system simulation model and the SCADA system is realized, including:

[0064] Connect the first device, the second device and the third device via Ethernet, and configure the IP addresses to be the first IP address, the second IP address and the third IP address respectively, the first device, the second device and the third device are the devices for deploying the OPAL-RT real-time simulator, the SCADA system and the OMNet++ software respectively;

[0065] In the third device, a first virtual network node and a second virtual network node are created in the communication system simulation model, the IP addresses are configured as a fourth IP address and a fifth IP address respectively, and a mapping between the first IP address and the fourth IP address and a mapping between the second IP address and the fifth IP address are established in the communication system simulation model;

[0066] Based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address, a strategy routing mechanism is adopted to realize data transmission among the power system simulation model, the communication system simulation model and the SCADA system.

[0067] In the specific implementation, Figure 4 As shown, in order to simulate the application scenarios and communication process of Modbus TCP in the power industry, the first device Host_A is deployed as an OPAL-RT real-time simulator, the second device Host_B is a SCADA system, and the network communication simulation software OMNet++ is run on the third device Host_C. Host_A, Host_B and Host_C are connected together through Ethernet, the first IP address of Host_A is 192.168.1.100, the second IP address of Host_B is 192.168.1.101, and the third IP address of Host_C is 192.168.1.254. In the Host_C device, a communication system simulation model is built through OMNet++ and INET, and a first virtual network node and a second virtual network node are created in the communication system simulation model, and the IP addresses are configured as the fourth IP address 192.168.4.100 and the fifth IP address 192.168.4.101 respectively; a Modbus-based The SCADA system in Host_B is the slave device of TCP, and the SCADA system in Host_B is the master device. The first IP address of the Slave running in Host_A is mapped to the fourth IP address 192.168.4.100 of the first virtual network node built in OMNet++, and the second IP address of the SCADA running in Host_B is mapped to the fifth IP address 192.168.4.101 of the second virtual network node built in OMNet++.

[0068] As an example, when the Master of the SCADA system running on the second IP address 192.168.1.101 wants to obtain the Slave data on the first IP address 192.168.1.100, the IP address of the Slave is configured in the SCADA system as the fourth IP address 192.168.4.100 of the first virtual network node in OMNet++.

[0069] The technical solution provided in this embodiment realizes data transmission in the real-time simulation platform of the electric power information-physical system based on the policy routing mechanism, realizes the seamless connection between the power system and the communication system, and ensures the smooth transmission of data.

[0070] On the basis of the above embodiments, this embodiment further illustrates and optimizes the technical solution. Specifically, in this embodiment, based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address, a strategy routing mechanism is adopted to realize data transmission between the power system simulation model, the communication system simulation model and the SCADA system, including:

[0071] The third IP address is used as the next hop address, and a first static routing rule is configured on the first device and a second static routing rule is configured on the second device, wherein the first static routing rule is used to transmit the data generated by the first device to the third device, and the second static routing rule is used to transmit the data generated by the second device to the third device;

[0072] A first TAP device and a second TAP device are newly created in the third device, and the IP addresses of the first TAP device and the second TAP device are configured as the sixth IP address and the seventh IP address respectively. The two TAP devices serve as interfaces for communication between the real network and the communication system simulation model built by OMNet++, and the communication data of the first device and the second device are transparently connected to the simulation network.

[0073] On the third device, a first policy routing based on the source IP is configured based on the first IP address and a first policy routing table is newly created. In the first policy routing table, the sixth IP address is used as the next hop address, and a third static routing rule is configured. Based on the first policy routing, the first policy routing table and the third static routing rule, data from the first device is routed to the first TAP device.

[0074] On the third device, based on the second IP address, configure a second policy routing based on the source IP and create a second policy routing table. In the second policy routing table, use the seventh IP address as the next hop address, configure a fourth static routing rule, and based on the second policy routing, the second policy routing table and the fourth static routing rule, implement routing of data from the second device to the second TAP device.

[0075] Based on the first IP address and the fourth IP address, configure a first network address translation of the first virtual network node, where the first network address translation is used to implement translation between the first IP address and the fourth IP address;

[0076] Based on the second IP address and the fifth IP address, a second network address translation of the second virtual network node is configured, where the second network address translation is used to implement translation between the second IP address and the fifth IP address.

[0077] In the specific implementation, the specific steps of the data transmission process in the real-time simulation platform of the power information-physical system are as follows:

[0078] Step 1: By configuring the first static routing rule in Host_A: ip route add192.168.4.0 / 24via 192.168.1.254, the data generated by the power system simulation model in the OPAL-RT real-time simulator is routed to the host Host_C where OMNet++ is located;

[0079] Step 2: By configuring the second static routing rule in Host_B: ip route add192.168.4.0 / 24via 192.168.1.254, the control command data generated by the SCADA system is routed to the host Host_C where OMNet++ is located;

[0080] Step 3: Open OMNet++ network communication simulation software in Host_C, use INET library to build network topology, use StandardHost model to create first virtual network node V_Host_A and second virtual network node V_Host_B respectively, and configure one network card for each of V_Host_A and V_Host_B respectively. Set IP address of eth0 of V_Host_A to the fourth IP address 192.168.4.100, and set IP address of eth0 of V_Host_B to the fifth IP address 192.168.4.101. The specific configuration in omnetpp.ini is as follows: *.configurator.config=xml(" <config><interface hosts=’V_Host_A’names=’eth0’address=192.168.4.100’netmask=’255.255.255.0’ / ><interfacehosts=’V_Host_B’names=’eth0’address=192.168.4.101’netmask=’255.255.255.0’ / >< / config> ”), where eth0 of V_Host_A represents the real Host_A, and eth0 of V_Host_B represents the real Host_B;

[0081] Step 4: Enable the system IP forwarding function (ip forward) in Host_C;

[0082] Step 5: Create the first policy routing table policyroute1 and the first TAP device tapa in Host_C, configure the IP of tapa to be the sixth IP address 192.168.2.100, add the third static routing rule in the first policy routing table policyroute1: sudo ip route add 192.168.4.0 / 24via192.168.2.100policyroute1, and configure the first policy routing based on the source IP through the following command: sudo ip rule add from 192.168.1.100 / 32policyroute1, so that the IP data packet from the first IP address 192.168.1.100 (real OPAL-RT host) and the target host is the fourth IP address 192.168.4.100 (first virtual network node) is routed to tapa;

[0083] Step 6, create a second policy routing table policyroute2 and a second TAP device tapb in Host_C, configure the IP of tapb to be the seventh IP address 192.168.2.101, add the fourth static routing rule in the second policy routing table policyroute2: sudo ip route add 192.168.4.0 / 24via192.168.2.101policyroute2, and configure the second policy routing based on the source IP through the following command: sudo ip rule add from 192.168.1.101 / 32policyroute2, so that the IP data packet from the second IP address 192.168.1.101 (real SCADA host) and the target host is the fifth IP address 192.168.4.101 (second virtual network node) is routed to tapb;

[0084] Step 7. Return to the OMNet++ network communication simulation software opened in Host_C, and add another network card eth1 for V_Host_A and V_Host_B respectively, so as to connect the data in tapa and tapb to the simulation network built by OMNet++. Specifically, the configuration in omnetpp.ini is as follows: *.V_Host_A.eth[1].typename="ExtUpperEthernetInterface"*.V_Host_A.eth[1].device="tapa"*.V_Host_A.eth[1].copyConfiguration="copyFromExt"*.V_Host_B.eth[1].typename="ExtUpperEthernetInterface"*.V_Host_B.eth[1].device="tapb"*.V_Host_B.eth[1].copyConfiguration="copyFromExt";

[0085] Step 8: Configure the first network address translation (NAT) of V_Host_A in omnetpp.ini, so that the source address of the IP packet with the first IP address 192.168.1.100 from the real network host is translated into the fourth IP address 192.168.4.100 of the first virtual network node, and the source address of the IP packet with the fourth IP address 192.168.4.100 from the first virtual network node is translated into the external real first IP address 192.168.1.100. The specific configuration is as follows: *.V_Host_A.ipv4.natTable.config=xml(" <config><entry type=’postrouting’packetFilter=’has(Ipv4Header)&;&;Ipv4Header.srcAddress.str()==\"192.168.1.100\”srcAddress=’192.168.4.100’ / ><entry type=’prerouting’packetFilter=’has(Ipv4Header)&;&;Ipv4Header.destAddress.str()==\"192.168.4.100\”’destAddress=’192.168.1.100’ / >< / config> ”);

[0086] Step 9, configure the second network address translation of V_Host_B in omnetpp.ini, so that the source address of the IP packet from the second IP address 192.168.1.101 of the real network host is translated into the fifth IP address 192.168.4.101 of the second virtual network node, and the source address of the IP packet from the fifth IP address 192.168.4.101 of the second virtual network node is translated into the external real second IP address 192.168.1.101. The specific configuration is as follows: *.V_Host_B.ipv4.natTable.config=xml(" <config><entry type=’postrouting’packetFilter=’has(Ipv4Header)&;&;Ipv4Header.srcAddress.str()==\"192.168.1.101\”’srcAddress=’192.168.4.101’ / ><entry type=’prerouting’packetFilter=’has(Ipv4Header)&;&;Ipv4Header.destAddress.str()==\"192.168.4.101\”’destAddress=’192.168.1.101’ / >< / config> ”).

[0087] The technical solution provided in this embodiment realizes seamless connection between the power system and the communication system through policy routing configuration, without the need to modify the power system model.

[0088] Based on the above embodiments, this embodiment further illustrates and optimizes the technical solution. Specifically, in this embodiment, in the real-time simulation platform of the electric power information-physical system, the attack model and the protection model are integrated in the communication simulation environment, and the security of the power system is verified based on the attack model and the protection model, including:

[0089] Set simulation parameters, including the time, method, and intensity of the attack, as well as the deployment and configuration of protection measures;

[0090] Run simulations to simulate the operation of the power system and simulate security events in the network based on attack models;

[0091] Collect simulation data, including the behavior and response of the power system when attacked based on the protection model;

[0092] Adjust the parameters of the attack model and the protection model according to the simulation data.

[0093] In the specific implementation, the attack model and the protection model are integrated in the communication simulation environment to ensure that they can interact with the power system simulation model; the simulation parameters are set, including the time, method, and intensity of the attack, as well as the deployment and configuration of the protection measures; the simulation is run to simulate the operation of the power system and security events in the network at the same time, and the behavior and response of the power system when attacked are observed; the simulation data is collected to evaluate the impact of the attack and the effectiveness of the protection measures, and to analyze the vulnerabilities and potential risks of the power system; the parameters of the attack model and the protection model are adjusted according to the simulation data to optimize the security configuration of the power system; multiple simulations are performed to test different attack scenarios and defense strategies to ensure the security of the power system.

[0094] The technical solution provided in this embodiment is customized and developed based on the open source INET model under the OMNet++ framework to achieve the expansion of attack models and protection models, so as to better simulate possible network attack scenarios in the power system. These attack models and protection models can simulate the secure communication and potential attack behaviors between the power system and the information system during the simulation process, and flexibly adjust the security mechanism in the communication link according to the needs, thereby realizing a comprehensive verification of the communication security of the power system.

[0095] Based on the above embodiment, this embodiment further illustrates and optimizes the technical solution. Specifically, in this embodiment, the method further includes:

[0096] The communication system simulation model is constructed using NS-3 simulation software.

[0097] Specifically, in addition to OMNet++, you can also consider using other open source network simulation software such as NS-3 to build communication system simulation models. NS-3 also supports multiple network protocols and models and has active community support.

[0098] In the specific implementation, it is necessary to first evaluate whether the model library of the simulation software supports the required power system and communication system models, and adjust the integration method of the simulation platform to ensure compatibility with the power system model and the OPAL-RT real-time simulator.

[0099] The technical solution provided in this embodiment uses open source simulation software to build a communication system simulation model, which reduces the cost of building a real-time simulation platform for the power information-physical system and improves the flexibility and scalability of the simulation platform.

[0100] Based on the above embodiment, this embodiment further illustrates and optimizes the technical solution. Specifically, in this embodiment, the method further includes:

[0101] Select a cloud service platform;

[0102] Deploy the simulation environment based on the cloud service platform.

[0103] In the specific implementation, a suitable cloud service platform, such as Amazon Web Services (AWS), Azure or Google Cloud, is selected to deploy the simulation environment, ensure the security of data transmission and processing, and the seamless integration of the cloud platform and the local simulation environment.

[0104] The technical solution provided in this embodiment uses cloud computing resources to simulate power systems and communication systems, which can provide flexible computing power and storage resources to adapt to simulation needs of different scales and improve the flexibility of the real-time simulation platform of the power information-physical system.

[0105] Figure 5 This is a structural block diagram of an implementation device of a real-time simulation platform for an electric power information-physical system provided in an embodiment of the present application. For the sake of convenience, only the parts related to the embodiment of the present application are shown. Figure 5 The implementation device 500 of the real-time simulation platform of the electric power information-physical system may include a first model construction module 501, a second model construction module 502, a simulation platform construction module 503, a data transmission setting module 504 and a security verification module 505.

[0106] The first model building module 501 is used to use Simulink, RT-LAB software and OPAL-RT real-time simulator to build a power system simulation model and realize real-time simulation of the power system.

[0107] The second model building module 502 is used to build a communication system simulation model in the OMNet++ environment using the INET model library, and configure the network topology and communication protocol of the communication system.

[0108] The simulation platform building module 503 is used to build a real-time simulation platform for the power information-physical system based on the power system simulation model, the communication system simulation model and the SCADA system.

[0109] The data transmission setting module 504 is used to realize data transmission between the power system simulation model, the communication system simulation model and the SCADA system based on the policy routing mechanism in the power information physical system real-time simulation platform.

[0110] The security verification module 505 is used to integrate the attack model and the protection model in the real-time simulation platform of the electric power information-physical system in the communication simulation environment, and verify the security of the power system based on the attack model and the protection model.

[0111] An implementation device of an electric power information-physical system real-time simulation platform provided in an embodiment of the present application has the same beneficial effects as the implementation method of the electric power information-physical system real-time simulation platform described above.

[0112] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of the present application. Their specific functions and technical effects can be found in the method embodiment part and will not be repeated here.

[0113] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0114] Figure 6 This is a schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 6 As shown, the electronic device 6 of this embodiment includes: at least one processor 60 ( Figure 6 Only one is shown), a memory 61, and a computer program 62 stored in the memory 61 and executable on at least one processor 60, the processor 60 executes the computer program 62 to implement the above Figure 1 The steps in the method embodiment, or the implementation of the above Figure 5 Functions of each module / unit in the device embodiment.

[0115] The electronic device 6 may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The electronic device 6 may include but is not limited to a processor 60 and a memory 61. Those skilled in the art will appreciate that Figure 6 It is only an example of the electronic device 6 and does not constitute a limitation on the electronic device 6. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0116] The processor 60 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0117] In some embodiments, the memory 61 may be an internal storage unit of the electronic device 6, such as a hard disk or memory of the electronic device 6. In other embodiments, the memory 61 may also be an external storage device of the electronic device 6, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device 6. Further, the memory 61 may also include both an internal storage unit and an external storage device of the electronic device 6. The memory 61 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as program codes of a computer program. The memory 61 may also be used to temporarily store data that has been output or is to be output.

[0118] The embodiment of the present application further provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0119] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include at least: any entity or device capable of carrying the computer program code to an electronic device, a recording medium, a computer memory, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), an electric carrier signal, a telecommunication signal, and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a disk or an optical disk.

[0120] A computer-readable storage medium provided in an embodiment of the present application has the same beneficial effects as the implementation method of the above-mentioned electric power information-physical system real-time simulation platform.

[0121] An embodiment of the present application provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0122] A computer program product provided in an embodiment of the present application has the same beneficial effects as the implementation method of the above-mentioned electric power information-physical system real-time simulation platform.

[0123] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0124] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0125] In the embodiments provided in the present application, it should be understood that the disclosed devices / electronic devices and methods can be implemented in other ways. For example, the device / electronic device embodiments described above are merely schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0126] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0127] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A method for implementing a real-time simulation platform for an electric power information-physical system, characterized in that: The method comprises: Use Simulink, RT-LAB software and OPAL-RT real-time simulator to build power system simulation model and realize real-time simulation of power system; In the OMNet++ environment, the INET model library is used to build a communication system simulation model, and the network topology and communication protocol of the communication system are configured; Building a real-time simulation platform for the electric power information-physical system based on the electric power system simulation model, the communication system simulation model and the SCADA system; In the electric power information-physical system real-time simulation platform, based on the policy routing mechanism, data transmission between the electric power system simulation model, the communication system simulation model and the SCADA system is realized; In the electric power information-physical system real-time simulation platform, an attack model and a protection model are integrated in a communication simulation environment, and the security of the electric power system is verified based on the attack model and the protection model.

2. The method according to claim 1, characterized in that In the electric power information-physical system real-time simulation platform, based on the policy routing mechanism, data transmission between the electric power system simulation model, the communication system simulation model and the SCADA system is realized, including: Connect the first device, the second device and the third device via Ethernet, and configure the IP addresses to be the first IP address, the second IP address and the third IP address respectively, wherein the first device, the second device and the third device are devices for deploying the OPAL-RT real-time simulator, the SCADA system and the OMNet++ software respectively; In the third device, a first virtual network node and a second virtual network node are created in the communication system simulation model, IP addresses are configured as a fourth IP address and a fifth IP address respectively, and a mapping between the first IP address and the fourth IP address and a mapping between the second IP address and the fifth IP address are established in the communication system simulation model; Based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address, the policy routing mechanism is adopted to realize data transmission among the power system simulation model, the communication system simulation model and the SCADA system.

3. The method according to claim 2, characterized in that The method of using the strategy routing mechanism to implement data transmission between the power system simulation model, the communication system simulation model and the SCADA system based on the first IP address, the second IP address, the third IP address, the fourth IP address and the fifth IP address includes: Using the third IP address as the next hop address, respectively configuring a first static routing rule on the first device and configuring a second static routing rule on the second device, wherein the first static routing rule is used to transmit the data generated by the first device to the third device, and the second static routing rule is used to transmit the data generated by the second device to the third device; Create a first TAP device and a second TAP device in the third device, and configure IP addresses of the first TAP device and the second TAP device as a sixth IP address and a seventh IP address respectively; On the third device, based on the first IP address, configure a first policy routing based on the source IP and create a first policy routing table; in the first policy routing table, use the sixth IP address as the next hop address, configure a third static routing rule, and based on the first policy routing, the first policy routing table and the third static routing rule, implement routing of data from the first device to the first TAP device; On the third device, based on the second IP address, configure a second policy routing based on the source IP and create a new second policy routing table; in the second policy routing table, use the seventh IP address as the next hop address, configure a fourth static routing rule, and based on the second policy routing, the second policy routing table and the fourth static routing rule, implement routing of data from the second device to the second TAP device; Based on the first IP address and the fourth IP address, configure a first network address translation of the first virtual network node, wherein the first network address translation is used to implement translation between the first IP address and the fourth IP address; Based on the second IP address and the fifth IP address, a second network address translation of the second virtual network node is configured, where the second network address translation is used to implement translation between the second IP address and the fifth IP address.

4. The method according to claim 1, characterized in that: In the real-time simulation platform of the electric power information-physical system, an attack model and a protection model are integrated in a communication simulation environment, and the security of the electric power system is verified based on the attack model and the protection model, including: Setting simulation parameters, including the time, method, and intensity of the attack, and the deployment and configuration of protection measures; Running a simulation to simulate the operation of the power system and to simulate security events in the network based on the attack model; Collecting simulation data, wherein the simulation data includes behaviors and responses of the power system based on the protection model when attacked; The parameters of the attack model and the protection model are adjusted according to the simulation data.

5. The method according to claim 1, characterized in that The method further comprises: The communication system simulation model is constructed using NS-3 simulation software.

6. The method according to claim 1, characterized in that The method further comprises: Select a cloud service platform; A simulation environment is deployed based on the cloud service platform.

7. The method according to any one of claims 1 to 6, characterized in that: The attack model is one or more of a denial of service attack, a distributed denial of service attack, malware propagation, a phishing attack, an internal attack, and an advanced persistent threat; The protection model is one or more of a firewall, an intrusion detection system, an intrusion prevention system, security information and event management, encryption and authentication mechanisms, and network isolation and segmentation.

8. A device for implementing a real-time simulation platform for an electric power information-physical system, characterized in that: The device comprises: The first model building module is used to build a power system simulation model and realize real-time simulation of the power system by using Simulink, RT-LAB software and OPAL-RT real-time simulator; The second model building module is used to build a communication system simulation model using the INET model library in the OMNet++ environment and configure the network topology and communication protocol of the communication system; A simulation platform building module, used to build a real-time simulation platform for the electric power information-physical system based on the electric power system simulation model, the communication system simulation model and the SCADA system; A data transmission setting module is used to realize data transmission between the power system simulation model, the communication system simulation model and the SCADA system based on a policy routing mechanism in the power information physical system real-time simulation platform; A security verification module is used to integrate an attack model and a protection model in the real-time simulation platform of the electric power information-physical system in a communication simulation environment, and to verify the security of the electric power system based on the attack model and the protection model.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images