5G short slice-based power service transmission method

Abstract

The invention provides a 5G short slice-based power service transmission method, which comprises the following steps of: deploying special 5GC core network equipment for power and special UPF equipment according to a power service partition requirement, opening a special FLexE channel for a power control service operator, opening a power VPN channel for a power non-control service operator, and then interconnecting an operator machine room with a power machine room, and the electric power system transmits the signaling and data converged by the operators to the electric power special 5GC core network equipment and the electric power special UPF equipment through the electric power special FLexE channel and the electric power VPN channel by virtue of the electric power machine room through an own transmission network of the electric power, so that electric power service transmission is realized. According to the method, the security and isolation of the power partition service are ensured to a great extent, the shortest-stroke public network segmentation of the power private network service is accurately realized, the physical isolation is strong, the links of renting the public network are few, and the private channel connection provided by networks such as SDH, OTN, OSU, SPN, data communication network and the like of the power is utilized to the maximum extent.

Description

Technical Field

[0001] The invention belongs to the technical field of electric power engineering and relates to an electric power business transmission method. Background Art

[0002] With the continuous development of the power system, the current power system builds wireless private networks through self-built base stations. In the absence of wide-area coverage policy conditions, in order to meet the rapidly growing terminal communication needs of the power system, the 5G short-slice method is a more feasible enhanced solution both in terms of security and economy. However, in the current power business transmission, in the process of carrying power business based on the 5G short-slice private network, the shortest trip public network segmentation of the power private network business cannot be accurately achieved, the physical isolation is weak, there are many links in the leased public network, and the dedicated channel connection provided by the power own network cannot be maximized. Summary of the invention

[0003] In order to solve the problems described in the background technology that the current power business transmission cannot accurately realize the shortest-stroke public network segmentation of power private network business, has weak physical isolation, has many public network leased links, and cannot maximize the use of dedicated channel connections provided by the power's own network, the present invention provides a power business transmission method based on 5G short slicing.

[0004] The method of the present invention comprises:

[0005] According to the requirements of power business zoning, 5G short-slice private network is used to carry services, power-specific 5GC core network equipment is deployed, and power-specific UPF equipment is deployed in different areas;

[0006] For power control-related services, a new interface is added to the operator's distribution and aggregation network equipment to open a power-specific FLexE channel. For power non-control-related services, the operator's distribution and aggregation network equipment opens a power VPN channel.

[0007] Interconnect the operator's computer room with the power computer room;

[0008] The power system uses its own transmission network to transmit the signaling and data gathered by operators through interconnected power computer rooms, power-specific FLexE channels and power VPN channels, to the power-specific 5GC core network equipment and power-specific UPF equipment, thereby realizing power business transmission.

[0009] Furthermore, in the deployment of the power-specific 5GC core network equipment, the power-specific 5GC core network equipment is deployed in the power system's own machine room, and fully quantized network elements are configured, which are dedicated to the power system card number, business management and system configuration;

[0010] In the partitioned deployment of the power-dedicated UPF equipment, the production control area UPF and the management information area UPF are deployed in the 5G short-slice private network. The production control area UPF is used to forward control-related business data, and the management information area UPF is used to forward non-control-related business data, thereby realizing power business partitioning.

[0011] Furthermore, the method for opening a dedicated FLexE channel for electric power is: using the operator's base station, BBU, access / aggregation router equipment, realizing RB resource reservation on the air interface side, after the 5G short slice is separated by the BBU, adding an interface on the existing operator's aggregation room equipment or the operator's local core room equipment to open a dedicated FlexE channel for electric power, and the FlexE channel is directly transmitted to the electric power's own transmission network;

[0012] The method for opening the power VPN channel is: for non-power control-related services, the operator's base station, BBU, access / aggregation router equipment are used to implement RB resource reservation on the air interface side. After the 5G short slice is separated by the BBU, the power VPN channel is opened in the existing operator's aggregation room equipment or the operator's local core room equipment. The VPN channel is directly transmitted to the power's own transmission network.

[0013] Furthermore, the power VPN channel ensures information security in the following ways: 1. Adopting unified IP address coding planning, establishing a network organizational structure, managing business system access rights, timely discovering and intercepting abnormal IP addresses, and improving network security quality; 2. Adopting multi-level data exchange, using multiple data structures to complete information protection, completing analysis according to data types, strengthening management authority control, and improving information data security; 3. Adopting multi-type information data encryption algorithms, completing plaintext data conversion, and decrypting through specific keys to ensure data security; 4. Adopting information security transmission encapsulation, completing information protection through packaging and encapsulation, and intercepting network information access behavior; 5. Carrying out secondary verification and binding authentication to further ensure information security isolation.

[0014] Furthermore, the IPSec national secret encryption function is activated simultaneously during the activation of the power-dedicated FLexE channel and the power VPN channel. The IPSec national secret encryption function includes: the N2 port IPSec national secret encryption function of the base station-power 5GC, the N3 port IPSec national secret encryption function of the base station-power UPF, the N4 port IPSec national secret encryption function of the power UPF-power 5GC, and the N6 port IPSec national secret encryption function of the power UPF-business system or security access area.

[0015] Furthermore, the interconnection method between the operator computer room and the power computer room includes:

[0016] For interconnection between the operator's aggregation room and the power room, select the aggregation room of the operator's city or county company, lay the power-operator aggregation room dual optical cable, add an interconnection firewall or security protection equipment in the power room, and configure the power's own transmission network-interconnection firewall or security protection equipment-operator aggregation room government and enterprise dedicated access router link channel;

[0017] For those who use the interconnection between the operator's core computer room in cities and the power computer room, select the operator's core computer room in cities, deploy interconnection access routers and isolation devices in the city power supply company, and configure the power's own transmission network-isolation device-interconnection access router-operator core bearer network equipment link channel.

[0018] Furthermore, the electric power self-owned transmission network includes an SDH optical fiber transmission network based on time division multiplexing, an OTN optical transmission network based on wavelength division, an OSU optical service unit based on OTN, an SPN slice packet network based on a packet transmission network, and a data communication network based on Ethernet;

[0019] According to the existing transmission network conditions, the power system flexibly selects and organizes operators to share the network channels of base station-power 5GC, power UPF-power 5GC, and power UPF-power business system, and transmits the signaling and data gathered by the operators through the interconnected power computer room via the power-dedicated FLexE channel and the power VPN channel to the power-dedicated 5GC core network equipment and power-dedicated UPF equipment, thereby realizing power business transmission.

[0020] Compared with the prior art, the present invention deploys power-specific 5GC core network equipment and dedicated UPF equipment according to the requirements of power business zoning, opens a power-specific FLexE channel for power-related business operators, opens a power VPN channel for power non-related business operators, and then interconnects the operator's computer room with the power computer room. The power system transmits the signaling and data gathered by the operator through the power's own transmission network through the power computer room via the power-specific FLexE channel and the power VPN channel to the power-specific 5GC core network equipment and power-specific UPF equipment, thereby realizing power business transmission. The present invention is based on 5G short slicing. Through power service access, operator computer room interconnection, and the power company's own transmission network, it realizes the flexible deployment and transmission of power services according to different service access requirements of power. Different isolation processing methods are provided in power service access for different types of power services, which greatly ensures the security and isolation of power partition services, accurately realizes the shortest-stroke public network segmentation of power private network services, has strong physical isolation, and has fewer public network rental links, making maximum use of dedicated channel connections provided by power company's own SDH, OTN, OSU, SPN, data communication networks and other networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1The present invention is a flow chart of the method.

[0022] Figure 2 This is a schematic diagram of the connection of access equipment using the operator's aggregation room.

[0023] Figure 3 This is a schematic diagram of the connection of the operator's core equipment room access equipment. DETAILED DESCRIPTION

[0024] In order to make the technical problems, technical solutions and beneficial effects to be solved by the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0025] The power service transmission method based on 5G short slices is as follows: Figure 1 The specific contents are as follows.

[0026] First, according to the requirements of power business zoning, use 5G short-slice private network to carry services, deploy power-specific 5GC core network equipment, and deploy power-specific UPF equipment in partitions.

[0027] Specifically, in the deployment of 5GC core network equipment dedicated to power, 5GC core network equipment dedicated to power is deployed in the power system's own computer room, and fully quantized network elements are configured, which are dedicated to the power system card number, business management and system configuration; in the partitioned deployment of UPF equipment dedicated to power, production control area UPF and management information area UPF are deployed in the 5G short-slice private network. The production control area UPF is used to forward control-related business data, and the management information area UPF is used to forward non-control-related business data, thereby realizing power business partitioning.

[0028] Then, for power-related control services, a new interface is added to the operator's distribution and aggregation network equipment to open a power-specific FLexE channel. For power-non-control services, the operator's distribution and aggregation network equipment opens a power VPN channel.

[0029] The existing base station distribution and aggregation related to power services generally adopts two methods: independent encapsulation and labeling virtual private network and flexible Ethernet. According to the different requirements of power services for security isolation, latency, etc., for non-power control services, a power-specific VPN channel is opened in the operator's distribution and aggregation network; for power control services, if the existing distribution and aggregation network is capable of opening FlexE, a new port is added to open a power-specific FlexE channel; if the existing distribution and aggregation network is not capable of opening FlexE, a new power-specific distribution and aggregation network device is added to open a power-specific FlexE channel.

[0030] Specifically, the method for opening a dedicated FLexE channel for electricity is: using the operator's base stations, BBU, access / aggregation router equipment to implement RB resource reservation on the air interface side. After the 5G short slices are separated by the BBU, a new interface is added to the existing operator's aggregation room equipment or the operator's local core room equipment to open a dedicated FlexE channel for electricity. The FlexE channel is directly transmitted to the power's own transmission network.

[0031] FlexE is a dedicated time slot isolation, which is one of the physical isolation technologies. It can realize applications such as ultra-large bandwidth interface, bandwidth allocation on demand, physical isolation of hard pipes, network slicing, and low latency guarantee. At present, some of the operator's existing access / aggregation router equipment does not have the FlexE function and needs to be upgraded / reconstructed. At the same time, the FlexE activation process is also relatively complicated and cumbersome. Therefore, the principle of on-demand activation is adopted for the opening of the power-dedicated FlexE channel. For operators whose existing equipment has the FlexE function, in principle, the existing equipment is used for activation; for operators whose existing equipment does not have the FlexE function, in principle, new equipment is used to open the power-dedicated FlexE channel.

[0032] Specifically, the method for opening the power VPN channel is as follows: for non-power control-related services, the operator's base stations, BBU, access / aggregation router equipment are used to implement RB resource reservation on the air interface side. After the 5G short slices are separated by the BBU, the power VPN channel is opened in the existing operator's aggregation room equipment or the operator's local core room equipment. The VPN channel is directly transmitted to the power's own transmission network.

[0033] In order to prevent the problems of conventional VPN technology that cannot prevent data tracking, viruses or malware, cannot prevent phishing fraud, and there are security risks such as information tampering, data eavesdropping, node impersonation, etc. in the face of network attacks, malicious intrusions, virus implantation, etc., which may cause security risks such as data leakage, the power VPN channel ensures information security through the following methods: First, adopt IP address unified coding planning, establish network organizational structure, manage business system access rights, timely discover and intercept abnormal IP addresses, and improve network security quality; second, adopt multi-level data exchange, use multiple data structures to complete information protection, complete analysis according to data type, strengthen management authority control, and improve information data security protection; third, adopt multi-type information data encryption algorithms, complete plaintext data conversion, and decrypt through specific keys to ensure data security; fourth, adopt information security transmission encapsulation, complete information protection through packaging and encapsulation, and intercept network information access behavior; fifth, carry out secondary verification and binding authentication to further ensure information security isolation.

[0034] More specifically, the IPSec national secret encryption function is activated simultaneously during the opening of the power-dedicated FLexE channel and the power VPN channel. The IPSec national secret encryption function includes: the N2 port IPSec national secret encryption function of the base station-power 5GC, the N3 port IPSec national secret encryption function of the base station-power UPF, the N4 port IPSec national secret encryption function of the power UPF-power 5GC, and the N6 port IPSec national secret encryption function of the power UPF-business system or security access area.

[0035] Next, interconnect the operator's computer room with the power computer room.

[0036] Specifically, for those who use the operator's aggregation room and the power room for interconnection, select the operator's municipal and county company aggregation rooms, lay the power-operator aggregation room dual optical cable, add an interconnection firewall or security protection equipment in the power room, and configure the power's own transmission network-interconnection firewall or security protection equipment-operator aggregation room government and enterprise dedicated access router link channel.

[0037] The schematic diagram of the operator's convergence room access equipment connection is as follows Figure 2 As shown in the figure, when the operator's computer room is centrally distributed according to administrative regions, the operator's city and county company aggregation computer room is selected to aggregate the power business terminal data to the operator's aggregation computer room's government and enterprise dedicated access router, and the data is transmitted to the power computer room's own transmission network equipment through the interconnection optical cable and the firewall / isolation device. The access method involves work including laying interconnection optical cables, adding interconnection firewalls, opening base station sharing, and configuring link channels, reducing the travel of power business data in the operator's bearer network and maximizing the use of the power's own bearer network.

[0038] Specifically, for those who use the interconnection between the operator's core computer room in cities and the power computer room, select the operator's core computer room in cities, deploy interconnection access routers and isolation devices in the city power supply company, and configure the power's own transmission network-isolation device-interconnection access router-operator core bearer network equipment link channel.

[0039] The schematic diagram of the operator's core equipment room access equipment connection is as follows Figure 3As shown, when the operator's computer rooms are numerous and scattered, in order to reduce the investment in laying interconnected optical cables and deploying firewalls / isolation devices, the operator's prefecture-level core computer room is selected to aggregate the power business terminal data to the core bearer network equipment of the operator's prefecture-level core computer room, and deploy interconnection access routers in the operator's prefecture-level core computer room and prefecture-level power supply company, and transmit the data to the prefecture-level power supply company's power transmission network through isolation devices. This access method involves the operator's prefecture-level core computer room and prefecture-level power supply company adding interconnection access routers, adding isolation devices to the prefecture-level power supply company, opening base station sharing, and configuring link channels, saving investment in laying optical cables and new equipment for interconnected nodes, reducing the occupation of power transmission network resources, and facilitating rapid access for operators.

[0040] Finally, the power system uses its own transmission network to transmit the signaling and data gathered by the operator through the interconnected power computer rooms, the power-specific FLexE channel and the power VPN channel, to the power-specific 5GC core network equipment and the power-specific UPF equipment, thereby realizing power business transmission.

[0041] Specifically, the power industry's own transmission network includes the SDH optical fiber transmission network based on time division multiplexing, the OTN optical transmission network based on wavelength division, the OSU optical service unit based on OTN, the SPN slice packet network based on the packet transmission network, and the data communication network based on Ethernet; according to the existing transmission network conditions, the power system flexibly selects and organizes operators to share the base station-power 5GC, power UPF-power 5GC, power UPF-power business system network channels, and transmits the signaling and data gathered by the operators through the interconnected power computer rooms via the power-dedicated FLexE channel and the power VPN channel to the power-dedicated 5GC core network equipment and the power-dedicated UPF equipment, thereby realizing power business transmission.

[0042] After the power business terminals are gathered to the power by the operator, they are transmitted through the power's own transmission network to ensure the security of power business data. According to the current status of the power transmission network, various transmission networks including SDH, OTN, OSU, SPN, data communication network, etc. can be flexibly selected on site for data transmission to maximize the use of the existing network resources of the power.

[0043] In the metropolitan area network, the power company uses SDH optical fiber transmission network to aggregate data from substations, county companies, secondary units and other sites within the jurisdiction of the municipal power supply company to the municipal power supply company. It uses time division multiplexing technology to divide dedicated time slots to ensure that each business channel is stable and isolated from each other. At the same time, the provincial backbone network is also deployed with SDH optical fiber transmission network to aggregate data from municipal power supply companies to the provincial power company. Currently, the maximum bandwidth of SDH optical fiber transmission network supports 10G.

[0044] The provincial backbone network is deployed with an OTN optical transmission network based on wavelength division multiplexing, which has the advantages of large bandwidth and reduced fiber core resource occupation. By independently encapsulating each business data and dividing it into different channels, the data of the municipal power supply companies are aggregated to the provincial power company to ensure channel isolation and stable standby. Currently, the single-wavelength bandwidth of OTN supports the evolution to 800G.

[0045] The OSU optical service unit is based on the technical development of the OTN optical transport network. By optimizing the multiplexing mapping path, it introduces OSU particles on the basis of the OTN frame structure and directly maps to the high-order ODUk. It supports flexible configuration of 2Mb / s-10Gb / s time slots. It has technical advantages such as security isolation, flexible particles, ultra-low latency and minimalist adjustment. It can meet the differentiated needs of different customers and play an important role in the government and enterprise dedicated line bearer market. By flexibly setting the PB bandwidth, it determines the minimum granularity of customer services that the OSU can support, and can achieve efficient bearing of services with different granularities of 2M-1000Gbps.

[0046] SPN slicing packet network is a new generation of optical transport network technology. It is based on Ethernet technology and has the ability to provide differentiated deterministic bearer capabilities for multiple services. It has functions such as ultra-large bandwidth transmission, low-latency reliable bearer, efficient and flexible slicing, and software-defined network centralized management and control. FlexE slicing technology can be used to achieve hard pipe isolation of services between different large intervals, and can achieve hard isolation slices with a granularity of 10Mbit / s on a physical network. It has flexible N×10Mbit / s bandwidth allocation capabilities, thereby providing differentiated bearer services such as bandwidth, latency, and jitter for a variety of services at the 2Mbit / s to 10Gbit / s level.

[0047] The data communication network is owned by the power company and is used to transmit large-bandwidth, non-real-time services. It is networked with routers and switches, and uses the power company's own optical cables or SDH optical fiber transmission network. It forms a networking architecture of municipal companies-county companies-substations based on cities and has the ability to carry a variety of power services.

[0048] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A power service transmission method based on 5G short slices, characterized in that: include: According to the requirements of power business zoning, 5G short-slice private network is used to carry services, power-specific 5GC core network equipment is deployed, and power-specific UPF equipment is deployed in different areas; For power control-related services, operators distribute aggregation network equipment to add new interfaces to open power-specific FLexE channels. For power non-control-related services, operators distribute aggregation network equipment to open power VPN channels. Interconnect the operator's computer room with the power computer room; The power system uses its own transmission network to transmit the signaling and data gathered by operators through the power computer room, the power-dedicated FLexE channel and the power VPN channel, to the power-dedicated 5GC core network equipment and the power-dedicated UPF equipment, thereby realizing power business transmission.

2. The method for transmitting electric power services based on 5G short slices according to claim 1, characterized in that: In the deployment of the power-specific 5GC core network equipment, the power-specific 5GC core network equipment is deployed in the power system's own machine room, and fully quantized network elements are configured, which are dedicated to the power system card number, business management and system configuration; In the partitioned deployment of the power-dedicated UPF equipment, the production control area UPF and the management information area UPF are deployed in the 5G short-slice private network. The production control area UPF is used to forward control-related business data, and the management information area UPF is used to forward non-control-related business data, thereby realizing power business partitioning.

3. The method for transmitting electric power services based on 5G short slices according to claim 2 is characterized in that: The method for opening a dedicated FLexE channel for electric power is: using the operator's base station, BBU, access / aggregation router equipment to implement RB resource reservation on the air interface side, after the 5G short slice is separated by the BBU, a new interface is added to the existing operator's aggregation room equipment or the operator's local core room equipment to open a dedicated FlexE channel for electric power, and the FlexE channel is directly transmitted to the electric power's own transmission network; The method for opening the power VPN channel is: for non-power control-related services, the operator's base station, BBU, access / aggregation router equipment are used to implement RB resource reservation on the air interface side. After the 5G short slice is separated by the BBU, the power VPN channel is opened in the existing operator's aggregation room equipment or the operator's local core room equipment. The VPN channel is directly transmitted to the power's own transmission network.

4. The method for transmitting electric power services based on 5G short slices according to claim 3 is characterized in that: The power VPN channel ensures information security in the following ways:

1. Adopting unified IP address coding planning, establishing network organizational structure, managing business system access rights, timely discovering and blocking abnormal IP addresses, and improving network security quality; 2. Adopting multi-level data exchange, using multiple data structures to complete information protection, completing analysis according to data types, strengthening management authority control, and improving information data security; 3. Adopting multi-type information data encryption algorithms, completing plaintext data conversion, and decrypting through specific keys to ensure data security; Fourth, adopt information security transmission encapsulation, complete information protection through packaging and encapsulation, and intercept network information access behavior; Fifth, carry out secondary verification and binding authentication to further ensure information security isolation.

5. The method for transmitting electric power services based on 5G short slices according to claim 4 is characterized in that: During the opening process of the power-dedicated FLexE channel and the power VPN channel, the IPSec national encryption function is also opened. The IPSec national encryption function includes: the N2 port IPSec national encryption function of the base station-power 5GC, the N3 port IPSec national encryption function of the base station-power UPF, the N4 port IPSec national encryption function of the power UPF-power 5GC and the N6 port IPSec national encryption function of the power UPF-business system or security access area.

6. The method for transmitting electric power services based on 5G short slices according to claim 4 is characterized in that: The interconnection method between the operator computer room and the power computer room includes: For interconnection between the operator's aggregation room and the power room, select the aggregation room of the operator's city or county company, lay the power-operator aggregation room dual optical cable, add an interconnection firewall or security protection equipment in the power room, and configure the power's own transmission network-interconnection firewall or security protection equipment-operator aggregation room government and enterprise dedicated access router link channel; For those who use the interconnection between the operator's core computer room in cities and the power computer room, select the operator's core computer room in cities, deploy interconnection access routers and isolation devices in the city power supply company, and configure the power's own transmission network-isolation device-interconnection access router-operator core bearer network equipment link channel.

7. The method for transmitting electric power services based on 5G short slices according to claim 4 is characterized in that: The electric power self-owned transmission network includes an SDH optical fiber transmission network based on time division multiplexing, an OTN optical transmission network based on wavelength division, an OSU optical service unit based on OTN, an SPN slice packet network based on a packet transmission network, and a data communication network based on Ethernet; According to the existing transmission network conditions, the power system flexibly selects and organizes operators to share the network channels of base station-power 5GC, power UPF-power 5GC, and power UPF-power business system, and transmits the signaling and data gathered by the operators through the interconnected power computer room via the power-dedicated FLexE channel and the power VPN channel to the power-dedicated 5GC core network equipment and power-dedicated UPF equipment, thereby realizing power business transmission.

Images