Digital safety control system of nuclear power plant

Abstract

The invention relates to the field of digital safety, in particular to a digital safety control system for a nuclear power plant, which comprises a communication module used for receiving and sending information with a client; the classification module is used for judging a user category corresponding to the client according to the identity label; the identity authentication module is used for determining an identity authentication mode corresponding to the identity authentication request according to the user category, performing identity authentication on the identity authentication request according to the identity authentication mode, and generating identity authentication reply information; and the nuclear power equipment management module is used for sending a control instruction to the nuclear power plant equipment through the nuclear power control station according to the nuclear power production control request after the identity verification is passed, and generating control reply information according to information returned by the nuclear power control station. According to the invention, the safety level of the digital safety control system of the nuclear power plant is greatly improved, and the risks of unauthorized access and hostile attack are effectively prevented.

Description

Technical Field

[0001] The invention relates to the field of digital safety, and in particular to a digital safety control system for a nuclear power plant. Background Art

[0002] The digital safety control system of a nuclear power plant is a system that uses computer technology and automation equipment to comprehensively monitor and control the nuclear power plant. With the advancement of science and technology, the digital safety control system has gradually replaced the traditional analog control system because it has the advantages of high control accuracy, high reliability, and strong data processing capabilities. The information security control of the digital safety control system refers to the effective protection of data and operations within the nuclear power plant system to prevent unauthorized access, modification or destruction. The need for this security control stems from the operating environment and mission characteristics of the nuclear power plant. The data and operations of the nuclear power plant are extremely sensitive and important. Any information leakage, data tampering or illegal operation may lead to serious consequences. Therefore, it is necessary to strictly control the digital safety control system of the nuclear power plant, which includes but is not limited to access control, data protection, operation audit, security alarm, etc.

[0003] At present, the safety management and control of the digital safety control system of nuclear power plants mainly relies on personnel control and login passwords. For example, by enforcing the use of complex login passwords to prevent unauthorized access, etc. However, the complexity of personnel control and password management may lead to operational errors or omissions, thus affecting the safety of the system. Summary of the invention

[0004] In order to solve the above problems, the present invention provides a digital safety control system for a nuclear power plant.

[0005] The present invention discloses a digital safety control system for a nuclear power plant, wherein the digital safety control system for a nuclear power plant is connected to a nuclear power control station and a plurality of clients of the nuclear power plant respectively, and the digital safety control system for a nuclear power plant comprises:

[0006] A communication module, used to receive an identity authentication request and a nuclear power production control request from a client, and to send identity authentication reply information corresponding to the identity authentication request and control reply information corresponding to the nuclear power production control request to the client, wherein the identity authentication request includes an identity identifier;

[0007] A classification module, used to determine the user category corresponding to the client according to the identity identifier;

[0008] An identity authentication module, configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, authenticate the identity authentication request according to the identity authentication mode, and generate the identity authentication reply information;

[0009] The nuclear power equipment management module is used to send control instructions to the nuclear power plant equipment through the nuclear power control station according to the nuclear power production control request after the identity authentication is passed, and generate the control reply information according to the information returned by the nuclear power control station.

[0010] Furthermore, the identity verification module includes:

[0011] An identity authentication submodule, configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, and authenticate the identity authentication request according to the identity authentication mode;

[0012] The judgment submodule is used to generate the identity authentication reply information according to the identity authentication result.

[0013] Furthermore, the identity verification submodule includes:

[0014] A first verification submodule, used for performing identity authentication on the identity authentication request according to a preset first identity authentication mode;

[0015] A second verification submodule, used for performing identity authentication on the identity authentication request according to a preset second identity authentication mode;

[0016] A third verification submodule, used for authenticating the identity verification request according to a preset third identity verification mode;

[0017] A selection submodule is used to select the corresponding first verification submodule, and / or the second verification submodule, and / or the third verification submodule for identity authentication according to the user category.

[0018] Furthermore, the first identity verification mode is a password verification mode;

[0019] The first verification submodule is used to parse the identity authentication request, obtain the password to be verified, and perform identity authentication based on the identity identifier and the password to be verified.

[0020] Furthermore, the second identity verification mode is a signature verification mode;

[0021] The second verification submodule is used to parse the identity authentication request, obtain the information to be verified and the signature, decode the signature according to a preset public key, compare the information to be verified with the decoding result, and perform identity authentication according to the comparison result.

[0022] Further, the third identity authentication mode is a certificate authentication mode;

[0023] The third verification submodule is used to parse the identity verification request, obtain the certificate, and perform identity verification based on the verification result of the certificate.

[0024] Furthermore, the third verification submodule includes:

[0025] A device certificate verification unit, configured to parse the identity verification request, obtain a device certificate, and perform identity verification based on a verification result of the device certificate;

[0026] and / or

[0027] The identity certificate verification unit is used to parse the identity authentication request to obtain the identity certificate, and perform identity authentication according to the verification result of the identity certificate and whether the identity certificate matches the identity identifier.

[0028] Furthermore, the identity verification module further includes:

[0029] The authority determination submodule is used to determine the authority level corresponding to the client in a preset authority configuration file according to the user category;

[0030] Furthermore, the nuclear power plant digital safety control system further comprises:

[0031] The access authority control module is used to determine whether to process the nuclear power production control request according to the authority level.

[0032] Furthermore, the communication module is also used to receive a data storage request and send data storage reply information corresponding to the data storage request;

[0033] The nuclear power plant digital safety control system also includes:

[0034] A data storage module is used to parse the data storage request to obtain data to be stored, encrypt the data to be stored using the SM4 algorithm to obtain encrypted data, calculate a first data summary for the encrypted data based on the HMAC-SM3 algorithm; generate encrypted storage data based on the encrypted data and the first data summary and store the encrypted storage data to obtain a storage location;

[0035] The metadata storage module is used to generate a data name for the data to be stored, combine the data name and the storage location to form metadata, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

[0036] Furthermore, the communication module is also used to receive a data read request and send data read reply information corresponding to the data read request;

[0037] The nuclear power plant digital safety control system also includes:

[0038] The metadata reading module is used to parse the data reading request to obtain the data name, and retrieve the corresponding storage location from a preset storage dictionary file according to the data name;

[0039] A data reading module is used to read the encrypted storage data from the storage location, parse the encrypted storage data, obtain the encrypted data and a second data summary; based on the HMAC-SM3 algorithm, verify the integrity of the encrypted data according to the second data summary; when the integrity verification passes, use the SM4 algorithm to decrypt the encrypted data, and generate the data read reply information based on the decryption result.

[0040] Furthermore, the nuclear power equipment management module includes:

[0041] A decryption submodule, used to perform integrity verification and decryption on the nuclear power production control request to obtain a control instruction after the identity authentication is passed;

[0042] A control submodule, used for sending the control instructions to the nuclear power plant equipment through the nuclear power control station and receiving reply information from the nuclear power control station;

[0043] The encryption submodule is used to encrypt the reply information and generate the control reply information according to the encryption result.

[0044] Furthermore, the decryption submodule includes:

[0045] A parsing unit, configured to parse the nuclear power production control request after the identity authentication is passed, to obtain a third data summary and control data to be decrypted;

[0046] an integrity verification unit, configured to perform integrity verification on the control data to be decrypted based on the third data digest using an SM3 algorithm;

[0047] The decryption unit is used to decrypt the control data to be decrypted using the SM4 algorithm to obtain a control instruction after the integrity verification of the control data to be decrypted is passed.

[0048] Furthermore, the encryption submodule includes:

[0049] An encryption unit, used to encrypt the reply information using an SM4 algorithm to obtain encrypted reply information;

[0050] An integrity information generating unit, configured to generate a fourth data summary of the encrypted reply information by using an SM3 algorithm;

[0051] A control reply information generating unit is used to generate the control reply information according to the fourth data summary and the encrypted reply information.

[0052] Compared with the traditional single login password verification method, the present invention introduces a classification module and an identity verification module, which can determine the user category according to the identity identifier of the client user, and adopt a customized identity verification mode for different user categories. This flexible and diverse verification method can meet the security needs of different users. By implementing differentiated identity verification for different user categories, the present invention not only ensures the overall security of the system, but also takes into account the convenience and practicality of the verification method, avoiding the drawbacks of "one size fits all". Therefore, the present invention greatly improves the security level of the digital safety control system of nuclear power plants and effectively prevents the risks of unauthorized access and malicious attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0054] Figure 1 It is a structural schematic diagram of a digital safety control system for a nuclear power plant disclosed in an embodiment of the present invention;

[0055] Figure 2 It is a structural schematic diagram of a digital control system for a nuclear power plant disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0056] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, or product end including a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units inherent to these processes, methods, products, or ends.

[0058] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0059] See also Figure 1 As shown, Figure 1 Schematic diagram of the structure of a digital safety control system for a nuclear power plant disclosed in an embodiment of the present invention. Figure 1 As shown, the digital safety control system of the nuclear power plant may include:

[0060] The communication module 101 is used to receive an identity authentication request and a nuclear power production control request from a client, and to send identity authentication reply information corresponding to the identity authentication request and control reply information corresponding to the nuclear power production control request to the client, wherein the identity authentication request includes an identity identifier;

[0061] In this optional embodiment, the communication protocol of the communication module may include TCP / IP protocol, HTTP protocol, WebSocket protocol, etc., which is not limited by the embodiment of the present invention. Among them, the TCP / IP protocol is the basis of network communication, which defines the rules for data transmission in the network. The HTTP protocol and the WebSocket protocol are built on the TCP / IP protocol and provide higher-level application functions. For example, identity authentication requests and nuclear power production control requests can be implemented based on the HTTP protocol, and the client can send the request data to the communication module by sending an HTTP POST or GET request. The request data can be encoded in JSON or XML format, which includes the specific content of the request, such as identity identification, control instructions, etc.

[0062] In this optional embodiment, the nuclear power production control request is used to remotely control the nuclear power plant equipment. The client can start, stop, and adjust the operating parameters of the nuclear power equipment by sending the nuclear power production control request.

[0063] A classification module 102, used to determine the user category corresponding to the client according to the identity identifier;

[0064] In an optional embodiment, the user category corresponding to the client may be an engineer client or an operator client.

[0065] The identity authentication module 103 is used to determine the identity authentication mode corresponding to the identity authentication request according to the user category, authenticate the identity authentication request according to the identity authentication mode, and generate the identity authentication reply information;

[0066] In an optional embodiment, the identity authentication module includes:

[0067] An identity authentication submodule, configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, and authenticate the identity authentication request according to the identity authentication mode;

[0068] The judgment submodule is used to generate the identity authentication reply information according to the identity authentication result.

[0069] It can be seen that this optional embodiment can flexibly select different identity authentication modes to verify the identity authentication request according to the user category corresponding to the client by setting the identity authentication submodule and the judgment submodule in the identity authentication module, and generate corresponding identity authentication reply information according to the verification result. This design can meet the different requirements of different user categories for identity authentication methods and speeds. For example, for user categories that need to log in quickly to perform nuclear power production control operations, a relatively simple and fast identity authentication mode can be selected; and for user categories that do not need to perform control operations immediately, a more stringent and secure identity authentication mode can be selected. By adopting different identity authentication modes according to user categories, the flexibility and efficiency of the system can be improved while ensuring the security of the system, thereby better meeting the needs of different users. On the other hand, when it is necessary to add a new verification method or modify the verification logic, only the corresponding submodule needs to be modified without affecting the functions of other parts. This modular design improves the maintainability and scalability of the system.

[0070] In an optional embodiment, the identity authentication submodule includes:

[0071] A first verification submodule, used for performing identity authentication on the identity authentication request according to a preset first identity authentication mode;

[0072] A second verification submodule, used for performing identity authentication on the identity authentication request according to a preset second identity authentication mode;

[0073] A third verification submodule, used for authenticating the identity verification request according to a preset third identity verification mode;

[0074] A selection submodule is used to select the corresponding first verification submodule, and / or the second verification submodule, and / or the third verification submodule for identity authentication according to the user category.

[0075] This optional embodiment can provide a variety of preset identity authentication modes by setting a first verification submodule, a second verification submodule, a third verification submodule and a selection submodule in the identity authentication submodule, and flexibly select one or more verification submodules to verify the identity authentication request according to the user category corresponding to the client, further enhancing the flexibility and adaptability of the system, and can adopt the most suitable identity authentication method according to the characteristics and needs of different user categories. For example, for user categories with higher security requirements, multiple verification submodules can be selected and used in combination to provide multiple identity authentication; and for user categories with relatively low security requirements, a single verification submodule can be selected to simplify the identity authentication process. By flexibly selecting verification submodules, the efficiency of identity authentication and user experience can be optimized while meeting the security requirements of different user categories.

[0076] In an optional embodiment, the first identity verification mode is a password verification mode;

[0077] The first verification submodule is used to parse the identity authentication request, obtain the password to be verified, and perform identity authentication based on the identity identifier and the password to be verified.

[0078] It can be seen that this optional embodiment can provide a simple, convenient and widely used identity authentication method by setting the first identity authentication mode to the password verification mode and implementing the parsing and password verification functions of the identity authentication request in the first verification submodule. The password verification mode verifies the authenticity of the user's identity by comparing the password provided by the user with the password pre-stored in the system. This verification method is simple to operate, easy for users to understand and accept, and has a low implementation cost. For some user categories with relatively low security requirements or who need to log in quickly to operate, the password verification mode can provide a convenient and efficient means of identity authentication to meet their business needs. At the same time, the password verification mode can also be used in combination with other verification modes as a basic security line of defense to enhance the overall security of the system.

[0079] In an optional embodiment, the second identity verification mode is a signature verification mode;

[0080] The second verification submodule is used to parse the identity authentication request, obtain the information to be verified and the signature, decode the signature according to a preset public key, compare the information to be verified with the decoding result, and perform identity authentication according to the comparison result.

[0081] It can be seen that this optional embodiment can provide a safe and reliable identity authentication method by setting the second identity authentication mode to the signature verification mode and implementing the verification function of the signature in the identity authentication request in the second verification submodule. The signature verification mode utilizes asymmetric encryption technology to confirm the authenticity of the identity of the sender of the request by verifying the digital signature carried in the request. Since the private key is only held by the user himself, and the public key can be widely distributed, signing the request information with the private key and then verifying the signature with the public key can effectively prevent security threats such as identity forgery and request tampering. For some user categories with higher security requirements or involving sensitive operations and data, the signature verification mode can provide more reliable and secure identity authentication, effectively protecting the interests of the system and users.

[0082] In an optional embodiment, the third identity authentication mode is a certificate authentication mode;

[0083] The third verification submodule is used to parse the identity verification request, obtain the certificate, and perform identity verification based on the verification result of the certificate.

[0084] It can be seen that this optional embodiment can provide a highly reliable and standardized identity authentication method by setting the third identity authentication mode to the certificate verification mode and implementing the verification function of the certificate in the identity authentication request in the third verification submodule. The certificate verification mode is based on the PKI (public key infrastructure) system, and confirms the legitimacy of the user's identity by verifying the digital certificate carried in the request. The digital certificate is issued by an authoritative certificate authority (CA), contains the user's identity information and public key, and its authenticity and integrity are guaranteed by the digital signature of the CA. By verifying the validity and credibility of the certificate, the authenticity of the user's identity and the legitimacy of the authority can be ensured. For some user categories with very high security requirements or those that need to comply with industry standards and laws and regulations, the certificate verification mode can provide the highest level of identity authentication to meet their strict security compliance requirements.

[0085] In an optional embodiment, the third verification submodule includes:

[0086] A device certificate verification unit, configured to parse the identity verification request, obtain a device certificate, and perform identity verification based on a verification result of the device certificate;

[0087] and / or

[0088] The identity certificate verification unit is used to parse the identity authentication request to obtain the identity certificate, and perform identity authentication according to the verification result of the identity certificate and whether the identity certificate matches the identity identifier.

[0089] It can be seen that this optional embodiment can provide more fine-grained and specialized verification functions for different certificate types by setting a device certificate verification unit and an identity certificate verification unit in the third verification submodule, thereby further improving the security and reliability of the certificate verification mode. Among them, the device certificate verification unit is specifically used to verify the device certificate carried in the request to ensure that the device initiating the request is a legal and trusted device; the identity certificate verification unit is specifically used to verify the identity certificate carried in the request, and match the certificate content with the identity identifier in the request to ensure the consistency of the user identity and the certificate. Through independent verification of different types of certificates, the validity and credibility of the certificate can be checked more comprehensively and in-depth, and the accuracy of identity authentication can be improved. At the same time, this fine-grained verification method can also better cope with security needs in different scenarios, such as access control for devices, or authority management for user identities.

[0090] In an optional embodiment, the identity authentication module further includes:

[0091] The authority determination submodule is used to determine the authority level corresponding to the client in a preset authority configuration file according to the user category;

[0092] Furthermore, the nuclear power plant digital safety control system further comprises:

[0093] The access authority control module is used to determine whether to process the nuclear power production control request according to the authority level.

[0094] It can be seen that this optional embodiment can achieve more refined and dynamic permission management and improve the security and controllability of the system by setting a permission determination submodule in the identity authentication module, determining the corresponding permission level in the preset permission configuration file according to the user category corresponding to the client, and performing access control on the nuclear power production control request according to the permission level through the access permission control module. This design combines identity authentication with permission control, presets different permission levels according to different user categories, and dynamically adjusts the user's permissions according to the actual identity authentication results at runtime. This can avoid simple "one-size-fits-all" permission management and provide a more flexible and adaptable access control mechanism. For example, for different positions in a nuclear power plant, different permission levels can be set according to their responsibilities and security levels to limit their access to the system and the scope of operation; at the same time, permissions can also be dynamically adjusted according to the user's identity, such as increasing or reducing the permissions of certain users within a specific time period to meet different security requirements. Through this fine-grained and dynamic permission control, the risk of permission abuse and unauthorized access can be minimized, and the overall security of the system can be improved. At the same time, this permission management method based on user category and identity can also better meet compliance requirements and ensure that access to key operations and sensitive information is effectively controlled and audited.

[0095] The nuclear power equipment management module 104 is used to send control instructions to the nuclear power plant equipment through the nuclear power control station according to the nuclear power production control request after the identity authentication is passed, and generate the control reply information according to the information returned by the nuclear power control station.

[0096] In an optional embodiment, the communication module is further used to receive a data storage request, and send data storage reply information corresponding to the data storage request;

[0097] The nuclear power plant digital safety control system also includes:

[0098] A data storage module is used to parse the data storage request to obtain data to be stored, encrypt the data to be stored using the SM4 algorithm to obtain encrypted data, calculate a first data summary for the encrypted data based on the HMAC-SM3 algorithm; generate encrypted storage data based on the encrypted data and the first data summary and store the encrypted storage data to obtain a storage location;

[0099] The metadata storage module is used to generate a data name for the data to be stored, combine the data name and the storage location to form metadata, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

[0100] Among them, the SM4 algorithm is a national symmetric encryption algorithm with high security and efficiency. It can quickly encrypt and decrypt data and is suitable for scenarios with high requirements for data confidentiality. The HMAC-SM3 algorithm is a message authentication code algorithm based on the SM3 cryptographic hash algorithm. It can verify the integrity of data and authenticate the data source to prevent data from being tampered with or forged. By combining SM4 encryption and HMAC-SM3 authentication, the confidentiality and integrity of data can be guaranteed at the same time, providing more comprehensive and reliable security protection.

[0101] It can be seen that this optional embodiment can realize the safe storage and management of nuclear power production related data by introducing a data storage module and a metadata storage module into the digital safety control system of a nuclear power plant. The data storage module uses the SM4 algorithm to encrypt the data to be stored to ensure the confidentiality of the data; at the same time, the HMAC-SM3 algorithm is used to calculate the first data summary of the encrypted data to ensure the integrity of the data. The encrypted data and the first data summary are combined to generate encrypted storage data for storage, which can facilitate subsequent integrity verification while ensuring data security. The metadata storage module generates a data name for the data to be stored, and stores the data name and storage location as metadata in a preset storage dictionary file, thereby realizing data indexing and rapid search. Data storage reply information is generated based on the data name, and the storage result can be fed back to the requesting party to improve the interactivity of the system. This combination of secure storage and metadata management can effectively prevent the leakage and tampering of nuclear power production data, improve the security and reliability of the system, and also facilitate efficient management and retrieval of data, laying the foundation for subsequent data utilization and analysis.

[0102] In an optional embodiment, the communication module is further used to receive a data read request, and send data read reply information corresponding to the data read request;

[0103] The nuclear power plant digital safety control system also includes:

[0104] The metadata reading module is used to parse the data reading request to obtain the data name, and retrieve the corresponding storage location from a preset storage dictionary file according to the data name;

[0105] A data reading module is used to read the encrypted storage data from the storage location, parse the encrypted storage data, obtain the encrypted data and a second data summary; based on the HMAC-SM3 algorithm, verify the integrity of the encrypted data according to the second data summary; when the integrity verification passes, use the SM4 algorithm to decrypt the encrypted data, and generate the data read reply information based on the decryption result.

[0106] The storage dictionary file is a file used to store key-value pairs. Data structures such as hash tables or B-trees can be used to organize data to achieve fast key-value lookup and access. The storage dictionary file is used to store the mapping relationship between data names and storage locations. By using the data name as the key, the corresponding storage location can be quickly retrieved to locate the required encrypted storage data. This metadata-based indexing method avoids the inefficiency of directly traversing and searching for massive data, and improves the performance and response speed of data reading.

[0107] It can be seen that this optional embodiment can realize the safe reading and verification of the stored nuclear power production data by introducing the metadata reading module and the data reading module in the digital safety control system of the nuclear power plant. The metadata reading module obtains the requested data name by parsing the data reading request, and retrieves the corresponding storage location from the preset storage dictionary file according to the data name, thereby realizing the rapid positioning and access of the data. The data reading module reads the encrypted storage data from the storage location and parses the encrypted data and the second data summary. By using the HMAC-SM3 algorithm to verify the second data summary, the integrity of the encrypted data can be ensured to prevent the data from being tampered with during storage and transmission. When the integrity verification is passed, the SM4 algorithm is used to decrypt the encrypted data to obtain the original data to be read, and the data reading reply information is generated based on the decryption result and fed back to the requesting party. This method of verifying the integrity first and then decrypting can effectively prevent the data from being maliciously tampered with and then decrypted, thereby avoiding the acquisition of erroneous or malicious data, and improving the security and reliability of data reading. At the same time, through the indexing and rapid retrieval of metadata, the efficiency and performance of data reading are also improved, meeting the needs of nuclear power production control for real-time access to data.

[0108] In an optional embodiment, the nuclear power equipment management module includes:

[0109] A decryption submodule, used to perform integrity verification and decryption on the nuclear power production control request to obtain a control instruction after the identity authentication is passed;

[0110] A control submodule, used for sending the control instructions to the nuclear power plant equipment through the nuclear power control station and receiving reply information from the nuclear power control station;

[0111] The encryption submodule is used to encrypt the reply information and generate the control reply information according to the encryption result.

[0112] It can be seen that this optional embodiment can realize the safe processing and transmission of nuclear power production control requests by setting a decryption submodule, a control submodule and an encryption submodule in the nuclear power equipment management module of the digital safety control system of the nuclear power plant. Specifically, after the identity authentication is passed, the decryption submodule performs integrity verification and decryption on the received nuclear power production control request to ensure the integrity and confidentiality of the request data. The control submodule sends the decrypted control instructions to the nuclear power plant equipment through the nuclear power control station and receives the reply information of the equipment, thereby realizing real-time control and monitoring of the nuclear power production process. The encryption submodule encrypts the reply information and generates encrypted control reply information to ensure the security of sensitive data during network transmission. Through this modular design, the responsibilities of each submodule are clear and they work together, which not only ensures the safety and reliability of nuclear power production control, but also improves the flexibility and scalability of the system. At the same time, key operations such as data encryption, decryption and integrity verification are completed on the server side, avoiding the risk of sensitive information being exposed on the client side, thereby further enhancing the security of the system.

[0113] In an optional embodiment, the decryption submodule includes:

[0114] A parsing unit, configured to parse the nuclear power production control request after the identity authentication is passed, to obtain a third data summary and control data to be decrypted;

[0115] an integrity verification unit, configured to perform integrity verification on the control data to be decrypted based on the third data digest using an SM3 algorithm;

[0116] The decryption unit is used to decrypt the control data to be decrypted using the SM4 algorithm to obtain a control instruction after the integrity verification of the control data to be decrypted is passed.

[0117] In this optional embodiment, the data digest refers to mapping data of any length into a fixed-length binary string through a one-way cryptographic hash function (such as SM3) for verifying data integrity. Even if the data changes slightly, the digest value will change significantly.

[0118] It can be seen that this optional embodiment realizes the step-by-step decryption and verification of nuclear power production control requests by setting a parsing unit, an integrity verification unit and a decryption unit in the decryption submodule of the digital safety control system of the nuclear power plant, thereby improving the security and reliability of data processing. The parsing unit first parses the received control request and extracts the third data summary to be verified and the control data to be decrypted. The integrity verification unit uses the SM3 algorithm to verify the integrity of the control data to ensure that the data has not been tampered with during transmission. Only when the integrity verification passes, the decryption unit will use the SM4 algorithm to decrypt the control data and obtain the real control instructions. This method of verifying the integrity first and then decrypting can avoid the decryption operation for tampered data, thereby reducing the risk of the system executing erroneous instructions after the data is maliciously tampered. At the same time, SM3 and SM4, as national secret algorithms, have high security strength, can effectively resist various cryptographic attacks, and protect the confidentiality and integrity of control instructions.

[0119] In an optional embodiment, the encryption submodule includes:

[0120] An encryption unit, used to encrypt the reply information using an SM4 algorithm to obtain encrypted reply information;

[0121] An integrity information generating unit, configured to generate a fourth data summary of the encrypted reply information by using an SM3 algorithm;

[0122] A control reply information generating unit is used to generate the control reply information according to the fourth data summary and the encrypted reply information.

[0123] It can be seen that this optional embodiment realizes the secure encryption and transmission of the reply information of the nuclear power equipment by setting the encryption unit, the integrity information generation unit and the control reply information generation unit in the encryption submodule of the digital safety control system of the nuclear power plant. The encryption unit uses the SM4 algorithm to encrypt the reply information and convert the plaintext information into ciphertext to prevent the data from being stolen or leaked during the network transmission process. The integrity information generation unit uses the SM3 algorithm to generate the fourth data summary of the encrypted reply information for verifying the integrity of the data. The control reply information generation unit packages the fourth data summary and the encrypted reply information to generate the final control reply information and sends it to the client. This combination of encryption and signature not only protects the confidentiality of the data, but also provides a means of verifying the integrity of the data, effectively preventing the data from being tampered with or forged during the transmission process. At the same time, as national secret algorithms, the SM3 and SM4 algorithms have high security strength and good performance, which can meet the high security requirements of nuclear power production control and ensure the safety and stability of nuclear power plant operation.

[0124] Figure 2The schematic diagram of the digital control system of a nuclear power plant is shown. Figure 2 The identity authentication component in the middle blue box includes the identity authentication module of the present invention, the access control component includes the access permission control module of the present invention, the storage security component includes the data storage module, metadata storage module, metadata reading module, and data reading module of the present invention, and the transmission security component includes the decryption submodule and encryption submodule of the present invention. Figure 2 DCS refers to Digital Control System. The nuclear power DCS process supervision layer accesses the identity authentication component, access control component, storage security component, and transmission security control component through the endogenous network security application interface component to provide support for the digital safety control of nuclear power plants. Figure 2 The green box at the bottom contains underlying libraries, third-party libraries, etc., which provide support for identity authentication components, access control components, storage security components, transmission security control components, etc. through endogenous network security service support interface components.

[0125] In summary, the digital safety control system for nuclear power plants disclosed in the present invention greatly improves the safety level of the digital safety control system for nuclear power plants and effectively prevents the risks of unauthorized access and malicious attacks. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

[0126] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the art may modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by a person of ordinary skill in the art without departing from the spirit and technical concept disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A digital safety control system for a nuclear power plant, characterized in that: The digital safety control system of the nuclear power plant is connected to the nuclear power control station and multiple clients of the nuclear power plant respectively, and the digital safety control system of the nuclear power plant includes: A communication module, used to receive an identity authentication request and a nuclear power production control request from a client, and to send identity authentication reply information corresponding to the identity authentication request and control reply information corresponding to the nuclear power production control request to the client, wherein the identity authentication request includes an identity identifier; A classification module, used to determine the user category corresponding to the client according to the identity identifier; An identity authentication module, configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, authenticate the identity authentication request according to the identity authentication mode, and generate the identity authentication reply information; The nuclear power equipment management module is used to send control instructions to the nuclear power plant equipment through the nuclear power control station according to the nuclear power production control request after the identity authentication is passed, and generate the control reply information according to the information returned by the nuclear power control station.

2. A digital safety control system for a nuclear power plant according to claim 1, characterized in that: The identity verification module comprises: An identity authentication submodule, configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, and authenticate the identity authentication request according to the identity authentication mode; The judgment submodule is used to generate the identity authentication reply information according to the identity authentication result.

3. A digital safety control system for a nuclear power plant according to claim 2, characterized in that: The identity verification submodule includes: A first verification submodule, used for performing identity authentication on the identity authentication request according to a preset first identity authentication mode; A second verification submodule, used for performing identity authentication on the identity authentication request according to a preset second identity authentication mode; A third verification submodule, used for authenticating the identity verification request according to a preset third identity verification mode; A selection submodule is used to select the corresponding first verification submodule, and / or the second verification submodule, and / or the third verification submodule for identity authentication according to the user category.

4. A digital safety control system for a nuclear power plant according to claim 3, characterized in that: The first identity verification mode is a password verification mode; The first verification submodule is used to parse the identity authentication request, obtain the password to be verified, and perform identity authentication based on the identity identifier and the password to be verified.

5. A digital safety control system for a nuclear power plant according to claim 3, characterized in that: The second identity verification mode is a signature verification mode; The second verification submodule is used to parse the identity authentication request, obtain the information to be verified and the signature, decode the signature according to a preset public key, compare the information to be verified with the decoding result, and perform identity authentication according to the comparison result.

6. A digital safety control system for a nuclear power plant according to claim 3, characterized in that: The third identity verification mode is a certificate verification mode; The third verification submodule is used to parse the identity verification request, obtain the certificate, and perform identity verification based on the verification result of the certificate.

7. A digital safety control system for a nuclear power plant according to claim 6, characterized in that: The third verification submodule includes: A device certificate verification unit, configured to parse the identity verification request, obtain a device certificate, and perform identity verification based on a verification result of the device certificate; and / or The identity certificate verification unit is used to parse the identity authentication request to obtain the identity certificate, and perform identity authentication according to the verification result of the identity certificate and whether the identity certificate matches the identity identifier.

8. A digital safety control system for a nuclear power plant according to claim 1, characterized in that: The identity verification module also includes: The authority determination submodule is used to determine the authority level corresponding to the client in a preset authority configuration file according to the user category; Furthermore, the nuclear power plant digital safety control system further comprises: The access authority control module is used to determine whether to process the nuclear power production control request according to the authority level.

9. A digital safety control system for a nuclear power plant according to claim 1, characterized in that: The communication module is also used to receive a data storage request and send data storage reply information corresponding to the data storage request; The nuclear power plant digital safety control system also includes: A data storage module is used to parse the data storage request to obtain data to be stored, encrypt the data to be stored using the SM4 algorithm to obtain encrypted data, calculate a first data summary for the encrypted data based on the HMAC-SM3 algorithm; generate encrypted storage data based on the encrypted data and the first data summary and store the encrypted storage data to obtain a storage location; The metadata storage module is used to generate a data name for the data to be stored, combine the data name and the storage location to form metadata, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

10. A digital safety control system for a nuclear power plant according to claim 1, characterized in that: The communication module is also used to receive a data read request and send data read reply information corresponding to the data read request; The nuclear power plant digital safety control system also includes: The metadata reading module is used to parse the data reading request to obtain the data name, and retrieve the corresponding storage location from a preset storage dictionary file according to the data name; A data reading module is used to read the encrypted storage data from the storage location, parse the encrypted storage data, obtain the encrypted data and a second data summary; based on the HMAC-SM3 algorithm, verify the integrity of the encrypted data according to the second data summary; when the integrity verification passes, use the SM4 algorithm to decrypt the encrypted data, and generate the data read reply information based on the decryption result.

Images