Nuclear power plant digitized safety control system

Abstract

The application relates to the field of digital security, and particularly relates to a nuclear power digital safety control system, which comprises a communication module, a classification module, an identity authentication module and a nuclear power equipment management module; the communication module is used for receiving and sending information with a client; the classification module is used for judging a user category corresponding to the client according to an identity; the identity authentication module is used for determining an identity authentication mode corresponding to an identity authentication request according to the user category, performing identity authentication on the identity authentication request according to the identity authentication mode, and generating identity authentication reply information; and the nuclear power equipment management module is used for sending a control instruction to a nuclear power plant equipment through a nuclear power control station according to a nuclear power production control request when the identity authentication is passed, and generating control reply information according to information returned by the nuclear power control station. The nuclear power digital safety control system greatly improves the safety level, and effectively prevents the risks of unauthorized access and malicious attacks.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of digital security, in particular to a nuclear power plant digital safety control system. BACKGROUND

[0002] The nuclear power plant digital safety control system is a system that uses computer technology and automation equipment to comprehensively monitor and control the nuclear power plant. With the progress of science and technology, the digital safety control system has gradually replaced the traditional analog control system because it has the advantages of high control precision, strong reliability, and strong data processing capability. The information security control of the digital safety control system refers to the effective protection of data and operations within the nuclear power plant system to prevent unauthorized access, modification, or destruction. The need for such security control stems from the operating environment and task characteristics of the nuclear power plant, which has extremely high sensitivity and importance. Any information leakage, data tampering, or illegal operation can lead to serious consequences. Therefore, it is necessary to strictly control the information security of the nuclear power plant digital safety control system, which includes but is not limited to access control, data protection, operation audit, and security alarm.

[0003] Currently, the safety control of the nuclear power plant digital safety control system mainly relies on personnel control and login passwords. For example, by forcing the use of complex login passwords to prevent unauthorized access. However, the complexity of personnel control and password management can lead to operational errors or omissions, affecting the safety of the system. SUMMARY

[0004] To solve the above problems, the present application provides a nuclear power plant digital safety control system.

[0005] The present application discloses a nuclear power plant digital safety control system, which is connected with a nuclear power control station and a plurality of clients of a nuclear power plant, and comprises:

[0006] A communication module is configured to receive an identity authentication request and a nuclear power production control request from a client, and send an identity authentication reply information corresponding to the identity authentication request and a control reply information corresponding to the nuclear power production control request to the client, wherein the identity authentication request comprises an identity.

[0007] A classification module is configured to determine a user category corresponding to the client according to the identity.

[0008] An identity authentication module is configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, perform identity authentication on the identity authentication request according to the identity authentication mode, and generate the identity authentication reply information.

[0009] The nuclear power plant management module is configured to, after the identity verification is passed, send a control instruction to a nuclear power plant device through a nuclear power control station according to the nuclear power production control request, and generate the control reply information according to information returned by the nuclear power control station.

[0010] Further, the identity verification module comprises:

[0011] An identity verification submodule is configured to determine an identity verification mode corresponding to the identity verification request according to the user category, and perform identity verification on the identity verification request according to the identity verification mode.

[0012] A judgment submodule is configured to generate the identity verification reply information according to a result of the identity verification.

[0013] Further, the identity verification submodule comprises:

[0014] A first verification submodule is configured to perform identity verification on the identity verification request according to a preset first identity verification mode.

[0015] A second verification submodule is configured to perform identity verification on the identity verification request according to a preset second identity verification mode.

[0016] A third verification submodule is configured to perform identity verification on the identity verification request according to a preset third identity verification mode.

[0017] A selection submodule is configured to select the first verification submodule, and / or the second verification submodule, and / or the third verification submodule corresponding to the user category for identity verification.

[0018] Further, the first identity verification mode is a password verification mode.

[0019] The first verification submodule is configured to parse the identity verification request to obtain a password to be verified, and perform identity verification based on the identity and the password to be verified.

[0020] Further, the second identity verification mode is a signature verification mode.

[0021] The second verification submodule is configured to parse the identity verification request to obtain information to be verified and a signature, decode the signature according to a preset public key, compare the information to be verified with a decoding result, and perform identity verification according to a comparison result.

[0022] Further, the third identity verification mode is a certificate verification mode.

[0023] The third verification submodule is configured to parse the identity verification request to obtain a certificate, and perform identity verification according to a verification result of the certificate.

[0024] Further, the third verification submodule comprises:

[0025] The device certificate verification unit is configured to parse the identity verification request to obtain a device certificate, and perform identity verification according to a verification result of the device certificate.

[0026] And / or

[0027] The identity certificate verification unit is configured to parse the identity verification request to obtain an identity certificate, and perform identity verification according to a verification result of the identity certificate and whether the identity certificate matches the identity identifier.

[0028] Further, the identity verification module further comprises:

[0029] The permission determination submodule is configured to determine a permission level corresponding to the client in a preset permission configuration file according to the user category.

[0030] In addition, the nuclear power digital security control system further comprises:

[0031] The access permission control module is configured to determine whether to process the nuclear power production control request according to the permission level.

[0032] Further, the communication module is further configured to receive a data storage request and send data storage reply information corresponding to the data storage request.

[0033] The nuclear power digital security control system further comprises:

[0034] The data storage module is configured to parse the data storage request to obtain to-be-stored data, encrypt the to-be-stored data by using an SM4 algorithm to obtain encrypted data, calculate a first data digest of the encrypted data based on an HMAC-SM3 algorithm, generate encrypted storage data based on the encrypted data and the first data digest and store the encrypted storage data to obtain a storage location.

[0035] The metadata storage module is configured to generate a data name for the to-be-stored data, combine the data name and the storage location to form metadata, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

[0036] Further, the communication module is further configured to receive a data read request and send data read reply information corresponding to the data read request.

[0037] The nuclear power digital security control system further comprises:

[0038] a metadata reading module, configured to parse the data reading request to obtain a data name, and search for a corresponding storage location from a preset storage dictionary file according to the data name;

[0039] a data reading module, configured to read encrypted storage data from the storage location, parse the encrypted storage data to obtain encrypted data and a second data digest, verify integrity of the encrypted data based on an HMAC-SM3 algorithm according to the second data digest, and decrypt the encrypted data using an SM4 algorithm when the integrity verification passes, to generate the data reading reply information based on a decryption result.

[0040] Further, the nuclear power plant management module comprises:

[0041] a decryption submodule, configured to perform integrity check and decryption on the nuclear power production control request to obtain a control instruction when the identity verification passes;

[0042] a control submodule, configured to send the control instruction to the nuclear power plant equipment through the nuclear power control station, and receive reply information of the nuclear power control station;

[0043] an encryption submodule, configured to encrypt the reply information, and generate the control reply information according to an encryption result.

[0044] Further, the decryption submodule comprises:

[0045] a parsing unit, configured to parse the nuclear power production control request to obtain a third data digest and to-be-decrypted control data when the identity verification passes;

[0046] an integrity verification unit, configured to perform integrity verification on the to-be-decrypted control data based on the third data digest using an SM3 algorithm;

[0047] a decryption unit, configured to decrypt the to-be-decrypted control data using an SM4 algorithm to obtain a control instruction when the integrity verification of the to-be-decrypted control data passes.

[0048] Further, the encryption submodule comprises:

[0049] an encryption unit, configured to encrypt the reply information using an SM4 algorithm to obtain encrypted reply information;

[0050] an integrity information generation unit, configured to generate a fourth data digest of the encrypted reply information using an SM3 algorithm;

[0051] a control reply information generation unit, configured to generate the control reply information according to the fourth data digest and the encrypted reply information.

[0052] Compared with the traditional single login password verification mode, the application introduces a classification module and an identity verification module, can judge the user category according to the identity of the client user, and adopts a customized identity verification mode for different user categories. This flexible and diverse verification mode can meet the security needs of different users. By implementing differentiated identity verification for different user categories, the application ensures the overall security of the system while also taking into account the convenience and practicality of the verification method, avoiding the drawbacks of "one size fits all". Therefore, the application greatly improves the safety level of the nuclear power plant digital safety control system, effectively preventing unauthorized access and malicious attack risks. BRIEF DESCRIPTION OF DRAWINGS

[0053] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor.

[0054] Figure 1 is a structural schematic diagram of a nuclear power plant digital safety control system disclosed by the embodiments of the present application;

[0055] Figure 2 is a structural schematic diagram of a nuclear power plant digital safety control system disclosed by the embodiments of the present application. DETAILED DESCRIPTION

[0056] In order to make the personnel in the technical field better understand the present application scheme, the following will combine the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only some embodiments of the present application, not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0057] The terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish different objects, not to describe a specific order. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, device, or product including a series of steps or units is not limited to the listed steps or units, but can optionally include steps or units not listed, or can optionally include other steps or units inherent to the process, method, product or end.

[0058] Reference to an "embodiment" herein means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are they necessarily mutually exclusive of one another. As will be apparent to those of ordinary skill in the art, embodiments described herein can be combinable with other embodiments.

[0059] Referring to Figure 1 as shown, Figure 1 is a structural schematic diagram of a nuclear power plant digital safety control system according to an embodiment of the application. As Figure 1 shown, the nuclear power plant digital safety control system can include:

[0060] The communication module 101 is configured to receive an identity authentication request of a client, a nuclear power production control request, and send an identity authentication reply information corresponding to the identity authentication request and a control reply information corresponding to the nuclear power production control request to the client, wherein the identity authentication request comprises an identity.

[0061] In this optional embodiment, the communication protocol of the communication module can include TCP / IP protocol, HTTP protocol, WebSocket protocol, etc., which is not limited by the embodiments of the application. The TCP / IP protocol is the basis of network communication, which defines the rules of data transmission in the network. The HTTP protocol and the WebSocket protocol are built on the TCP / IP protocol, and provide higher level application functions. For example, the identity authentication request and the nuclear power production control request can be implemented based on the HTTP protocol, and the client can send the request data to the communication module by sending the HTTP POST or GET request. The request data can be encoded in JSON or XML format, which contains the specific content of the request, such as the identity, the control instruction, etc.

[0062] In this optional embodiment, the nuclear power production control request is used to remotely control the nuclear power plant equipment. The client can start, stop, adjust the running parameters of the nuclear power equipment by sending the nuclear power production control request.

[0063] The classification module 102 is configured to determine the user category corresponding to the client according to the identity.

[0064] In one optional embodiment, the user category corresponding to the client can be an engineer client or an operator client.

[0065] The identity authentication module 103 is configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, perform identity authentication on the identity authentication request according to the identity authentication mode, and generate the identity authentication reply information.

[0066] In an optional embodiment, the identity authentication module comprises:

[0067] An identity authentication submodule is configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, and perform identity authentication on the identity authentication request according to the identity authentication mode.

[0068] A judgment submodule is configured to generate the identity authentication reply information according to the result of identity authentication.

[0069] It can be seen that, in the optional embodiment, the identity authentication submodule and the judgment submodule are arranged in the identity authentication module, so that different identity authentication modes can be flexibly selected to perform identity authentication on the identity authentication request according to the user category of the client, and the corresponding identity authentication reply information can be generated according to the result of identity authentication. This design can meet different requirements of different user categories on identity authentication modes and speed. For example, for a user category that needs to log in quickly to perform nuclear power production control operation, a relatively simple and fast identity authentication mode can be selected; and for a user category that does not need to perform control operation immediately, a more strict and secure identity authentication mode can be selected. By using different identity authentication modes according to the user category, the flexibility and efficiency of the system can be improved while ensuring the security of the system, so as to better meet the requirements of different users. On the other hand, when a new verification mode needs to be added or the verification logic needs to be modified, only the corresponding submodule needs to be modified, and the functions of other parts will not be affected, so that the modular design improves the maintainability and scalability of the system.

[0070] In an optional embodiment, the identity authentication submodule comprises:

[0071] A first verification submodule is configured to perform identity authentication on the identity authentication request according to a preset first identity authentication mode.

[0072] A second verification submodule is configured to perform identity authentication on the identity authentication request according to a preset second identity authentication mode.

[0073] A third verification submodule is configured to perform identity authentication on the identity authentication request according to a preset third identity authentication mode.

[0074] A selection submodule is configured to select the first verification submodule, and / or the second verification submodule, and / or the third verification submodule corresponding to the user category to perform identity authentication.

[0075] The optional embodiment can provide multiple preset identity verification modes by setting the first verification submodule, the second verification submodule, the third verification submodule and the selection submodule in the identity verification submodule, and can flexibly select one or more verification submodules to verify the identity verification request according to the user category corresponding to the client, thereby further enhancing the flexibility and adaptability of the system. The most suitable identity verification mode can be used according to the characteristics and needs of different user categories. For example, for a user category with high security requirements, multiple verification submodules can be selected for combined use to provide multiple identity verifications; and for a user category with relatively low security requirements, a single verification submodule can be selected to simplify the identity verification process. By flexibly selecting the verification submodule, the efficiency and user experience of identity verification can be optimized while meeting the security needs of different user categories.

[0076] In an optional embodiment, the first identity verification mode is a password verification mode.

[0077] The first verification submodule is configured to parse the identity verification request to obtain a password to be verified, and perform identity verification based on the identity and the password to be verified.

[0078] It can be seen that the optional embodiment sets the first identity verification mode as the password verification mode, and implements the parsing and password verification functions of the identity verification request in the first verification submodule, so as to provide a simple, convenient and widely used identity verification mode. The password verification mode verifies the authenticity of the user identity by comparing the password provided by the user with the password pre-stored by the system. This verification mode is simple to operate, easy for users to understand and accept, and has low implementation cost. For some user categories with relatively low security requirements or requiring quick login for operation, the password verification mode can provide a convenient and efficient identity verification means to meet their business needs. At the same time, the password verification mode can also be combined with other verification modes to serve as a basic security line to improve the overall security of the system.

[0079] In an optional embodiment, the second identity verification mode is a signature verification mode.

[0080] The second verification submodule is configured to parse the identity verification request to obtain verification information and a signature, decode the signature according to a preset public key, compare the verification information with the decoding result, and perform identity verification according to the comparison result.

[0081] It can be seen that the optional embodiment can provide a secure and reliable identity authentication mode by setting the second identity authentication mode as a signature verification mode and implementing a signature verification function in the second verification submodule. The signature verification mode uses asymmetric encryption technology to confirm the identity authenticity of the request sender by verifying the digital signature carried in the request. Since the private key is only held by the user and the public key can be widely distributed, signing the request information by the private key and verifying the signature by the public key can effectively prevent security threats such as identity forgery and request tampering. For some user categories with high security requirements or involving sensitive operations and data, the signature verification mode can provide more trusted and secure identity authentication, effectively protecting the interests of the system and the user.

[0082] In an optional embodiment, the third identity authentication mode is a certificate verification mode.

[0083] The third verification submodule is configured to parse the identity authentication request to obtain a certificate and perform identity authentication according to a verification result of the certificate.

[0084] It can be seen that the optional embodiment can provide a highly trusted and standardized identity authentication mode by setting the third identity authentication mode as a certificate verification mode and implementing a certificate verification function in the third verification submodule. The certificate verification mode is based on the PKI (Public Key Infrastructure) system and confirms the legality of the user identity by verifying the digital certificate carried in the request. The digital certificate is issued by an authoritative certificate authority (CA) and contains the user's identity information and public key, and the authenticity and integrity of the digital certificate are guaranteed by the CA's digital signature. By verifying the validity and credibility of the certificate, the authenticity of the user identity and the legality of the permission can be ensured. For some user categories with very high security requirements or needing to comply with industry standards and legal regulations, the certificate verification mode can provide the highest level of identity authentication to meet their strict security compliance requirements.

[0085] In an optional embodiment, the third verification submodule includes:

[0086] A device certificate verification unit is configured to parse the identity authentication request to obtain a device certificate and perform identity authentication according to a verification result of the device certificate.

[0087] and / or

[0088] An identity certificate verification unit is configured to parse the identity authentication request to obtain an identity certificate, perform identity authentication according to a verification result of the identity certificate, and determine whether the identity certificate matches the identity identifier.

[0089] It can be seen that the optional embodiment sets the device certificate verification unit and the identity certificate verification unit in the third verification submodule, which can provide more fine-grained and specialized verification functions for different certificate types, and further improve the security and reliability of the certificate verification mode. Among them, the device certificate verification unit is specially used for verifying the device certificate carried in the request, ensuring that the device initiating the request is a legal and trusted device; the identity certificate verification unit is specially used for verifying the identity certificate carried in the request and matching the certificate content with the identity in the request, ensuring the consistency of the user identity and the certificate. Through independent verification of different types of certificates, the effectiveness and credibility of the certificate can be more comprehensively and deeply checked, and the accuracy of identity authentication can be improved. At the same time, this fine-grained verification method can also better meet the security needs in different scenarios, such as access control for devices or permission management for user identities.

[0090] In an optional embodiment, the identity verification module further comprises:

[0091] a permission determination submodule configured to determine the permission level corresponding to the client in a preset permission configuration file according to the user category;

[0092] and the nuclear power digital security control system further comprises:

[0093] an access permission control module configured to determine whether to process the nuclear power production control request according to the permission level.

[0094] It can be seen that the optional embodiment can realize more fine and dynamic permission management, improve the security and controllability of the system by setting a permission determination submodule in the identity authentication module, determining the corresponding permission level in the preset permission configuration file according to the user category corresponding to the client, and performing access control on the nuclear power production control request according to the permission level through the access permission control module. This design combines identity authentication and permission control, presets different permission levels according to different user categories, and dynamically adjusts the permissions of users according to the actual identity authentication results in runtime. In this way, simple "one-size-fits-all" permission management can be avoided, and a more flexible and adaptive access control mechanism can be provided. For example, for different post personnel in a nuclear power plant, different permission levels can be set according to their responsibilities and security levels to limit their access and operation range of the system; at the same time, the permissions of users can be dynamically adjusted according to their identities, such as increasing or decreasing the permissions of some users in a specific time period to meet different security requirements. Through this fine-grained and dynamic permission management, the risk of permission abuse and unauthorized access can be minimized, and the overall security of the system can be improved. At the same time, this permission management method based on user categories and identities can also better meet compliance requirements and ensure that access to critical operations and sensitive information is effectively controlled and audited.

[0095] The nuclear power equipment management module 104 is configured to, after the identity verification is passed, send a control instruction to a nuclear power plant equipment through a nuclear power control station according to the nuclear power production control request, and generate the control reply information according to information returned by the nuclear power control station.

[0096] In an optional embodiment, the communication module is further configured to receive a data storage request and send data storage reply information corresponding to the data storage request.

[0097] The nuclear power digital safety control system further comprises:

[0098] The data storage module is configured to parse the data storage request to obtain to-be-stored data, encrypt the to-be-stored data by using an SM4 algorithm to obtain encrypted data, calculate a first data digest based on an HMAC-SM3 algorithm, generate encrypted storage data based on the encrypted data and the first data digest, and store the encrypted storage data to obtain a storage location.

[0099] The metadata storage module is configured to generate a data name for the to-be-stored data, compose metadata by using the data name and the storage location, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

[0100] The SM4 algorithm is a national symmetric encryption algorithm with high security and high efficiency, and can quickly encrypt and decrypt data, and is suitable for scenarios with high data confidentiality requirements. The HMAC-SM3 algorithm is a message authentication code algorithm based on the SM3 cryptographic hash algorithm, which can verify the integrity of the data and authenticate the data source, preventing data tampering or forgery. By combining SM4 encryption and HMAC-SM3 authentication, the confidentiality and integrity of the data can be ensured, providing more comprehensive and reliable security protection.

[0101] It can be seen that the optional embodiment can realize the safe storage and management of nuclear power production related data by introducing a data storage module and a metadata storage module in the nuclear power digital safety control system. The data storage module uses the SM4 algorithm to encrypt the data to be stored, ensuring the confidentiality of the data; at the same time, the HMAC-SM3 algorithm is used to calculate the first data digest of the encrypted data, ensuring the integrity of the data. The encrypted data and the first data digest are combined to generate encrypted storage data for storage, which can ensure data security while facilitating subsequent integrity verification. The metadata storage module generates a data name for the data to be stored, and stores the data name and the storage location as metadata in a preset storage dictionary file, realizing the indexing and quick searching of the data. The data storage reply information is generated based on the data name, which can feedback the storage result to the requester, improving the interactivity of the system. This combination of secure storage and metadata management can effectively prevent the leakage and tampering of nuclear power production data, improve the security and reliability of the system, and also facilitate efficient management and retrieval of data, laying a foundation for subsequent data utilization and analysis.

[0102] In an optional embodiment, the communication module is further configured to receive a data reading request and send data reading reply information corresponding to the data reading request;

[0103] The nuclear power digital safety control system further comprises:

[0104] The metadata reading module is configured to parse the data reading request to obtain a data name, and retrieve a corresponding storage location from a preset storage dictionary file according to the data name;

[0105] The data reading module is configured to read encrypted storage data from the storage location, parse the encrypted storage data to obtain encrypted data and a second data digest, verify the integrity of the encrypted data based on the second data digest according to the HMAC-SM3 algorithm, and when the integrity verification is passed, decrypt the encrypted data using the SM4 algorithm, and generate the data reading reply information based on the decryption result.

[0106] The storage dictionary file is a file for storing key-value pairs, which can use hash table or B-tree and other data structures to organize data, so as to realize fast key-value lookup and access. The storage dictionary file is used to store the mapping relationship between the data name and the storage location, and through the data name as the key, the corresponding storage location can be quickly retrieved, so as to locate the required encrypted storage data. This index mode based on metadata avoids the inefficient problem of directly traversing and searching massive data, and improves the performance and response speed of data reading.

[0107] It can be seen that, by introducing the metadata reading module and the data reading module in the nuclear power plant digital safety control system, the optional embodiment can realize the safe reading and verification of the stored nuclear power production data. The metadata reading module obtains the requested data name by analyzing the data reading request, and retrieves the corresponding storage location from the preset storage dictionary file according to the data name, thereby realizing the fast positioning and access of data. The data reading module reads the encrypted storage data from the storage location, and parses the encrypted data and the second data digest. By verifying the second data digest using the HMAC-SM3 algorithm, the integrity of the encrypted data can be ensured, and the data can be prevented from being tampered with during storage and transmission. When the integrity verification is passed, the SM4 algorithm is used to decrypt the encrypted data to obtain the original to-be-read data, and the data reading reply information is generated based on the decryption result and fed back to the requester. This way of verifying integrity before decryption can effectively prevent the data from being maliciously tampered with and then decrypted, thereby avoiding obtaining incorrect or malicious data, and improving the security and reliability of data reading. At the same time, through the index and fast retrieval of metadata, the efficiency and performance of data reading are also improved, meeting the needs of real-time access of nuclear power production control to data.

[0108] In an optional embodiment, the nuclear power equipment management module comprises:

[0109] The decryption submodule is configured to, when the identity verification is passed, perform integrity check and decryption on the nuclear power production control request to obtain a control instruction;

[0110] The control submodule is configured to send the control instruction to the nuclear power plant equipment through the nuclear power control station, and receive reply information of the nuclear power control station;

[0111] The encryption submodule is configured to encrypt the reply information, and generate the control reply information according to the encryption result.

[0112] It can be seen that the optional embodiment can realize the security processing and transmission of the nuclear power production control request by setting the decryption submodule, the control submodule and the encryption submodule in the nuclear power plant management module of the nuclear power plant digital safety control system. Specifically, the decryption submodule performs integrity check and decryption on the received nuclear power production control request after identity verification, ensuring the integrity and confidentiality of the request data. The control submodule sends the decrypted control instruction to the nuclear power plant equipment through the nuclear power control station and receives the reply information of the equipment, realizing the real-time control and monitoring of the nuclear power production process. The encryption submodule encrypts the reply information and generates encrypted control reply information, ensuring the security of sensitive data during network transmission. Through the modular design, the responsibilities of each submodule are clear, and they work together to ensure the safety and reliability of nuclear power production control, improve the flexibility and scalability of the system. At the same time, the key operations such as data encryption, decryption and integrity check are completed on the server side, avoiding the risk of exposing sensitive information on the client side, thereby further enhancing the security of the system.

[0113] In an optional embodiment, the decryption submodule comprises:

[0114] The parsing unit is configured to parse the nuclear power production control request to obtain a third data digest and to-be-decrypted control data when the identity verification is passed;

[0115] The integrity verification unit is configured to use the SM3 algorithm to perform integrity verification on the to-be-decrypted control data based on the third data digest;

[0116] The decryption unit is configured to use the SM4 algorithm to decrypt the to-be-decrypted control data to obtain the control instruction when the integrity verification of the to-be-decrypted control data is passed.

[0117] In this optional embodiment, the data digest refers to the mapping of data of any length to a binary string of fixed length through a one-way cryptographic hash function (such as SM3), which is used to verify data integrity. Even if the data changes slightly, the digest value will change greatly.

[0118] It can be seen that the optional embodiment realizes step-by-step decryption and verification of the nuclear power production control request by setting the parsing unit, the integrity verification unit and the decryption unit in the decryption submodule of the nuclear power digital safety control system, and improves the security and reliability of data processing. The parsing unit first parses the received control request, extracts the third data digest to be verified and the control data to be decrypted. The integrity verification unit uses the SM3 algorithm to verify the integrity of the control data, to ensure that the data has not been tampered with during transmission. Only in the case where the integrity verification is passed, the decryption unit will use the SM4 algorithm to decrypt the control data, to obtain the real control instruction. This way of verifying the integrity first and then decrypting can avoid the decryption operation for tampered data, thereby reducing the risk of system executing incorrect instructions caused by malicious tampering of data. At the same time, SM3 and SM4 as national cryptographic algorithms have high security strength, and can effectively resist various password attacks, to protect the confidentiality and integrity of the control instruction.

[0119] In an optional embodiment, the encryption submodule comprises:

[0120] The encryption unit is configured to use the SM4 algorithm to encrypt the reply information to obtain encrypted reply information.

[0121] The integrity information generation unit is configured to use the SM3 algorithm to generate a fourth data digest of the encrypted reply information.

[0122] The control reply information generation unit is configured to generate the control reply information according to the fourth data digest and the encrypted reply information.

[0123] It can be seen that the optional embodiment realizes secure encryption and transmission of the reply information of the nuclear power equipment by setting the encryption unit, the integrity information generation unit and the control reply information generation unit in the encryption submodule of the nuclear power digital safety control system. The encryption unit uses the SM4 algorithm to encrypt the reply information, to convert the plaintext information into ciphertext, to prevent data from being stolen or leaked during network transmission. The integrity information generation unit uses the SM3 algorithm to generate a fourth data digest of the encrypted reply information, to verify the integrity of the data. The control reply information generation unit packs the fourth data digest and the encrypted reply information to generate the final control reply information, and sends it to the client. This combination of encryption and signature not only protects the confidentiality of data, but also provides a means to verify the integrity of data, effectively preventing data from being tampered with or forged during transmission. At the same time, the SM3 and SM4 algorithms as national cryptographic algorithms have high security strength and good performance, and can meet the high security requirements of nuclear power production control, to ensure the safety and stability of the operation of the nuclear power plant.

[0124] Figure 2A structure diagram of a nuclear power plant digital control system is shown, Figure 2 The identity authentication component in the middle blue box comprises the identity verification module of the application, the access control component comprises the access right control module of the application, the storage security component comprises the data storage module, the metadata storage module, the metadata reading module and the data reading module of the application, and the transmission security component comprises the decryption submodule and the encryption submodule of the application. Figure 2 DCS refers to a digital control system, and the process supervision layer of the nuclear power DCS accesses the identity authentication component, the access control component, the storage security component and the transmission security control component through the endogenous network security application interface component to provide support for the nuclear power digital safety control, Figure 2 The bottom green box is a bottom layer library, a third party library and the like, and the identity authentication component, the access control component, the storage security component and the transmission security control component are supported by the endogenous network security service support interface component.

[0125] In summary, the nuclear power plant digital safety control system disclosed by the application greatly improves the safety level of the nuclear power plant digital safety control system, effectively prevents the risk of unauthorized access and malicious attacks. Therefore, the application effectively overcomes the various shortcomings in the prior art and has high industrial utilization value.

[0126] The above embodiments only exemplarily illustrate the principles and effects of the application, and are not used to limit the application. Any person skilled in the art can modify or change the above embodiments without departing from the spirit and scope of the application. Therefore, all equivalent modifications or changes completed by those skilled in the art without departing from the spirit and technical thought disclosed by the application should be covered by the claims of the application.

Claims

1. A digitalized safety control system for a nuclear power plant, characterized by, The nuclear power plant digital safety control system is connected with a nuclear power control station and a plurality of clients of the nuclear power plant respectively, and comprises: A communication module configured to receive an identity authentication request and a nuclear power production control request from a client, and send an identity authentication reply corresponding to the identity authentication request and a control reply corresponding to the nuclear power production control request to the client, wherein the identity authentication request comprises an identity. A classification module configured to determine a user category corresponding to the client according to the identity. An identity authentication module configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, perform identity authentication on the identity authentication request according to the identity authentication mode, and generate the identity authentication reply. A nuclear power equipment management module configured to send a control instruction to a nuclear power plant equipment through the nuclear power control station according to the nuclear power production control request when the identity authentication is passed, and generate the control reply according to information returned by the nuclear power control station.

2. A digital safety control system for nuclear power plants according to claim 1, characterized in that, The identity authentication module comprises: An identity authentication submodule configured to determine an identity authentication mode corresponding to the identity authentication request according to the user category, and perform identity authentication on the identity authentication request according to the identity authentication mode. A judgment submodule configured to generate the identity authentication reply according to a result of the identity authentication.

3. A digital safety control system for nuclear power plants according to claim 2, characterized in that, The identity authentication submodule comprises: A first authentication submodule configured to perform identity authentication on the identity authentication request according to a preset first identity authentication mode. A second authentication submodule configured to perform identity authentication on the identity authentication request according to a preset second identity authentication mode. A third authentication submodule configured to perform identity authentication on the identity authentication request according to a preset third identity authentication mode. A selection submodule configured to select the first authentication submodule, the second authentication submodule, and / or the third authentication submodule for identity authentication according to the user category.

4. The digital safety control system of claim 3, wherein, The first identity authentication mode is a password authentication mode. The first authentication submodule is configured to parse the identity authentication request to obtain a password to be verified, and perform identity authentication based on the identity and the password to be verified.

5. The digital safety control system of claim 3, wherein, The second identity authentication mode is a signature authentication mode. The second authentication submodule is configured to parse the identity authentication request to obtain information to be verified and a signature, decode the signature according to a preset public key, compare the information to be verified with a decoding result, and perform identity authentication according to a comparison result.

6. A digital safety control system for nuclear power plants according to claim 3, characterized in that, The third identity authentication mode is a certificate authentication mode. The third authentication submodule is configured to parse the identity authentication request to obtain a certificate, and perform identity authentication according to a verification result of the certificate.

7. A digital safety control system for nuclear power plants according to claim 6, characterized in that, The third authentication submodule comprises: A device certificate verification unit configured to parse the identity authentication request to obtain a device certificate, and perform identity authentication according to a verification result of the device certificate. and / or The identity certificate verification unit is configured to parse the identity verification request to obtain an identity certificate, perform identity verification according to a verification result of the identity certificate and whether the identity certificate matches the identity identifier.

8. The digital safety control system of a nuclear power plant according to claim 1, characterized in that, The identity verification module further includes: The permission determination sub-module is configured to determine a permission level corresponding to the client in a preset permission configuration file according to the user category. The nuclear power digital security control system further includes: The access permission control module is configured to determine whether to process the nuclear power production control request according to the permission level.

9. The digital safety control system of a nuclear power plant according to claim 1, wherein, The communication module is further configured to receive a data storage request and send data storage reply information corresponding to the data storage request. The nuclear power digital security control system further includes: The data storage module is configured to parse the data storage request to obtain to-be-stored data, encrypt the to-be-stored data by using an SM4 algorithm to obtain encrypted data, calculate a first data digest of the encrypted data based on an HMAC-SM3 algorithm, generate encrypted storage data based on the encrypted data and the first data digest, and store the encrypted storage data to obtain a storage location. The metadata storage module is configured to generate a data name for the to-be-stored data, combine the data name and the storage location to form metadata, store the metadata in a preset storage dictionary file, and generate the data storage reply information based on the data name.

10. The digital safety control system of a nuclear power plant according to claim 1, characterized in that, The communication module is further configured to receive a data read request and send data read reply information corresponding to the data read request. The nuclear power digital security control system further includes: The metadata read module is configured to parse the data read request to obtain a data name, and retrieve a corresponding storage location from a preset storage dictionary file according to the data name. The data read module is configured to read encrypted storage data from the storage location, parse the encrypted storage data to obtain encrypted data and a second data digest, verify integrity of the encrypted data according to the second data digest based on an HMAC-SM3 algorithm, and decrypt the encrypted data by using an SM4 algorithm when the integrity verification passes, to generate the data read reply information based on a decryption result.

Images