Mountain substation encryption transmission method based on 5G, quantum and optical fiber

Abstract

The invention discloses a mountain substation encryption transmission method based on 5G, quantum and optical fiber. In order to solve the problem that the spatial stability of optical fiber transmission cannot be guaranteed due to the fact that extra physical lines adopted by a traditional transformer substation are difficult to build, operate and maintain, the method comprises the steps that a two-way transmission process is included, a plant-station-side gateway transmits a data E file processed by plant-station-side data to quantum CPE through a forward isolation device; the quantum CPE encrypts the data E file and then completes information uploading interaction through a wireless public network scheduling master station quantum security gateway; the master station quantum security gateway receives the preprocessed master station side command, encrypts the master station side command and transmits the encrypted command to the quantum CPE through a wireless public network, the file decrypted by the quantum CPE is processed into a command E file on the plant station side, and the command E file is issued through the anti-phase isolation device to complete command issuing interaction; safety and stability two-way communication of the transformer substation and the service master station based on the quantum encryption communication technology can be achieved while transmission safety and reliability are guaranteed.

Description

Technical Field

[0001] The present invention relates to the field of high-tech innovation, and in particular to an encrypted transmission method for a mountain substation based on 5G, quantum, and optical fiber. Background Art

[0002] In order to meet the "N+1" protection mechanism, the fiber optic connection between existing substations must introduce a new physical backup channel as a dedicated channel for key business transmission to ensure the reliability and security of business transmission. It is necessary to consider the construction of supporting line projects and distribution network lines for new substations when setting up additional physical lines and assembling optical cables within these lines. This solution has weather and signal stability, but the traditional physical fiber installation method is too expensive and cannot be easily adapted to the mountainous and forested terrain near mountain substations. The fiber optic laying and operation and maintenance are extremely difficult and often consume a lot of manpower and time resources. The operation and maintenance are extremely difficult and easily damaged by natural external forces, and the spatial stability is difficult to guarantee.

[0003] For example, a "data transmission method between master and substation of smart substation" disclosed in Chinese patent literature, with announcement number CN111082515A, includes establishing configuration and data transmission channels between master and substation; the master station obtains the CFG-1 configuration file of the substation through the configuration channel, and edits and selects the required steady-state data and dynamic data to form a CFG-2 configuration file, and then sends the CFG-2 configuration file to the substation through the configuration channel; the master station sends a command to start real-time data transmission to the substation through the data transmission channel; the substation sends steady-state real-time data and dynamic real-time data to the master station through the data transmission channel according to the received CFG-2 configuration file. The steady-state data and dynamic data of the substation are configured through the configuration channel and sent to the master station through the data transmission channel, realizing the unified collection and integrated transmission of steady-state data and dynamic data between the master and substation of the power system. However, this solution relies on the existing physical channel transmission, and still has the problem of high cost and easy damage mentioned above, and cannot guarantee the safety and reliability of transmission. Summary of the invention

[0004] The present invention mainly solves the problem that the installation and operation and maintenance of additional physical lines used in traditional substations are difficult, resulting in the inability to guarantee the spatial stability of optical fiber transmission; it provides an encrypted transmission method for mountain substations based on 5G, quantum, and optical fiber, introduces 5G and quantum technologies, and establishes a dual-link data transmission channel based on 5G, quantum, and optical fiber; this solution adds a quantum access scenario for the substation on the basis of the existing technical architecture, and shares a quantum security service platform with the original master station in zone I, to achieve secure and stable two-way communication between the substation and the business master station based on quantum encryption communication technology.

[0005] The above technical problems of the present invention are mainly solved by the following technical solutions: The present invention includes: the data uploading process on the plant side: the plant side gateway transmits the data E file processed by the plant side data to the quantum CPE through the forward isolation device, and the quantum CPE encrypts the data E file and completes an upload information interaction through the wireless public network dispatching master station quantum security gateway; the master station side command issuing process: the master station quantum security gateway receives the master station side command after pre-processing, encrypts it and transmits it to the quantum CPE through the wireless public network, and the file is processed into a command E file on the plant side after decryption by the quantum CPE, and is issued through the reverse isolation device to complete a command exchange. The present invention adopts 5G quantum encryption in combination with wireless communication to improve the communication efficiency and security in the substation, while increasing the confidentiality in the communication process, preventing the communication network from being attacked and destroyed, and can minimize the difficulty of substation operation and maintenance and improve the reliability of data transmission.

[0006] As a preferred embodiment, the plant-side data uploading process also includes: the plant-side data is uploaded to the protocol gateway by the data communication gateway, and converted to a data E file via the protocol gateway; the quantum CPE sets a corresponding module for encrypting the data E file; the master station quantum security gateway receives the data E file and decrypts it, and then transmits it to the master station-side scheduling system through a security isolation device. By encrypting and decrypting the corresponding data and files through the quantum CPE module, the security of data transmission can be guaranteed to the maximum extent; by converting the data carrier through the gateway, the data can be turned into a more readable file, thereby ensuring the accuracy of communication.

[0007] As a preferred embodiment, the process of issuing the command on the master station side also includes: the command on the master station side is issued by the master station side scheduling system to the safety isolation device, and is transmitted to the master station quantum security gateway via the front-end acquisition gateway; the quantum CPE sets a corresponding module for decrypting the command on the master station side; the command on the master station side generates a command E file via the service gateway and is finally transmitted to the data communication gateway. The data is processed accordingly in the safety isolation device to ensure the security of the data, and then the processed data is uniformly delivered to the quantum security gateway through the front-end acquisition gateway for transmission and communication operations; the above design can ensure the security of command issuance and can meet the requirements of reliable data transmission.

[0008] Preferably, the master station side and the plant station side are respectively connected to the same quantum platform, that is, the quantum platform is respectively associated with the master station quantum security gateway and the plant station side quantum CPE; the master station side device and the plant station side device under the quantum platform are respectively designed, and the communication process based on 5G, encryption and optical fiber is realized by accessing the quantum platform to realize the upload of plant station side data to the master station side and / or the master station side command to the plant station side. The quantum platform connects the communication structure and encryption structure on both sides of the master station side and the plant station side, and by combining wireless communication and quantum encryption, it can improve the communication efficiency and security of the substation.

[0009] As a preferred embodiment, the master station side device design may include: the master station side is based on the quantum platform of the existing distribution network, a quantum security gateway is added in the wireless security access area between the operator and the main network, a firewall is added between the gateway to obtain the key and the quantum platform, the firewall allows the key to obtain the IP and port, and a quantum switch is added as an expansion interface. Setting up devices such as security gateways, switches and firewalls can reduce the cost of infrastructure construction. In the future, wireless and quantum redundant links can be added to the remaining power stations by simply adding terminal equipment, which improves the versatility of the overall system.

[0010] As a preferred embodiment, the design of the plant-side device may include: connecting the terminal network port on the field station side to the quantum CPE, and the CPE main network uses a SIM card to establish a quantum tunnel in the main station gateway to achieve link redundancy; the overall link between the main station and the plant station adopts a combination of 5G, quantum and wired optical fiber, and multiple links are backed up for each other. If the wired optical fiber fails, it is switched to the quantum tunnel link to complete the transmission. The focus of this transformation plan is based on the reuse of "5G+quantum encryption" under the original quantum platform, and security is enhanced by adding equipment such as quantum security gateways, firewalls and quantum switches. At the same time, two mutually backed-up links and link redundancy are used to improve the reliability of data transmission.

[0011] Preferably, the design of the master station side device may include: redeploying the quantum platform in the production control area of ​​the master station, and physically isolating the quantum platform from the wireless security access area of ​​the main network through a security isolation device; deploying a key proxy service and / or a quantum security gateway in the wireless security access area of ​​the main network, and performing quantum encryption communication with the quantum CPE on the plant side. Release the key to obtain the IP and port to enhance security; the overall link adopts a combination of 5G, quantum and wired optical fiber, and the two links are backed up for each other. When a transmission failure occurs in the wired optical fiber, the substation switches to a quantum tunnel link, which can effectively improve the reliability of data transmission.

[0012] As a preferred embodiment, the design of the plant-side device may include: constructing a secure access area on the plant-side, adding a protocol gateway, a forward and reverse isolation device, a service gateway, a vertical encryption authentication device and / or a quantum CPE therein, and constructing a secure quantum encryption communication transmission network. The core of this branch solution is to build a new quantum security service platform to build a secure quantum encryption communication transmission network, physically isolate the wireless security access area of ​​the dispatching master station in the production control area, and construct a secure access area on the substation side, adding equipment such as a protocol gateway, a forward and reverse isolation device, a service gateway, a vertical encryption authentication device and a quantum CPE.

[0013] The beneficial effects of the present invention are: 1. The invention discloses an encrypted transmission method for mountain substations based on 5G, quantum, and optical fiber. The method uses quantum encryption combined with wireless communication to effectively improve the communication efficiency and security of substations, ensure the real-time transmission and confidentiality of substation operation data, control instructions, and fault information, and prevent the communication network from being attacked or destroyed, thereby improving the intelligence, automation, and remoteness of substations, reducing the operating cost and maintenance difficulty of substations, and improving the service quality of substations and the reliability of power supply.

[0014] 2. The encrypted transmission method of a mountain substation based on 5G, quantum, and optical fiber of the present invention can meet the safety protection codes of the power monitoring system, provide a good security and reliability strategy, support a variety of security and reliability technical means; have a complete authority management mechanism; have a data backup and recovery mechanism, and can effectively ensure the safety of power station operation and transmission security.

[0015] 3. The invention provides an encrypted transmission method for mountain substations based on 5G, quantum, and optical fiber. The construction of its wireless terminal reduces the cost of infrastructure construction. The subsequent addition of wireless quantum redundant links to other power stations only requires the addition of terminal equipment, which can speed up the construction progress. At the same time, 5G quantum technology can be fully utilized in scenarios such as security defense, dynamic environment monitoring, safety fire protection, inspection robots, lock keys, monitoring devices, video surveillance, etc., and can enter various security areas according to actual needs, which is scalable.

[0016] 4. The encrypted transmission method for mountain substations based on 5G, quantum, and optical fiber of the present invention is different from the traditional optical fiber method for physical link redundancy. Instead, it uses quantum encrypted wireless communication, has extremely high economic benefits, can save costs to a great extent, and deploys the overall system conveniently and quickly. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flow chart of the process of data uploading on the plant side and issuing commands on the master side of a mountain substation encryption transmission method based on 5G, quantum, and optical fiber of the present invention. DETAILED DESCRIPTION

[0018] The technical solution of the present invention is further specifically described below through embodiments and in conjunction with the accompanying drawings.

[0019] Embodiment 1: This embodiment is a 5G, quantum, and optical fiber-based encrypted transmission method for mountain substations, such as Figure 1 As shown in the figure, the communication transmission process between the master station and the plant station includes: Data upload process on the plant side: The plant side data is uploaded to the protocol gateway by the data communication gateway, and converted by the protocol gateway to generate a data E file; the plant side gateway transmits the data E file processed by the plant side data to the quantum CPE through the forward isolation device, and the quantum CPE is equipped with a corresponding module to encrypt the data E file. The quantum CPE encrypts the data E file and dispatches it to the quantum security gateway of the main station through the wireless public network; the quantum security gateway of the main station receives the data E file and decrypts it, and then transmits it to the scheduling system on the main station side through the security isolation device, completing an upload information interaction.

[0020] The process of issuing commands on the master station side: The master station side command is issued by the master station side scheduling system to the safety isolation device, and is transmitted to the master station quantum security gateway via the front-end acquisition gateway; the master station quantum security gateway receives the master station side command after pre-processing, encrypts it and transmits it to the quantum CPE via the wireless public network. The quantum CPE is equipped with a corresponding module to decrypt the master station side command. After decryption by the quantum CPE, the file is processed into a command E file on the plant side and issued via the inverting isolation device; the master station side command generates a command E file via the service gateway and is finally transmitted to the data communication gateway, completing a command interaction.

[0021] The design architecture of the master station and the plant station includes: the master station side and the plant station side are respectively connected to the same quantum platform, that is, the quantum platform is respectively associated with the master station quantum security gateway and the quantum CPE on the plant station side; the master station side device and the plant station side device under the quantum platform are designed separately, and the communication process based on 5G, encryption and optical fiber is realized through the access of the quantum platform to realize the upload of plant station side data to the master station side and / or the issuance of master station side commands to the plant station side.

[0022] The design of the master station side device may include: the master station side is based on the quantum platform of the existing distribution network, a quantum security gateway is added in the wireless security access area between the operator and the main network, a firewall is added between the gateway to obtain the key and the quantum platform, the firewall allows the key to obtain the IP and port, and a quantum switch is added as an expansion interface.

[0023] The design of the plant-side device may include: connecting the terminal network port on the site side to the quantum CPE, and the CPE main network uses a SIM card to establish a quantum tunnel in the main station gateway to achieve link redundancy; the overall link between the main station and the plant station adopts 5G+quantum+wired optical fiber, with multiple links backing up each other. If the wired optical fiber fails, it will switch to the quantum tunnel link to complete the transmission.

[0024] Security measures are added on the basis of the existing quantum platform, including adding firewalls, quantum switches, quantum security gateways and other equipment to the main station, and using (5G+quantum and wired optical fiber) to back up the overall link of the substation. Based on the reuse of "5G+quantum encryption" under the original quantum platform, security is enhanced by adding quantum security gateways, firewalls, quantum switches and other equipment, and two mutually backed-up links and link redundancy are used to improve the reliability of data transmission.

[0025] Embodiment 2: This embodiment is an encrypted transmission method for mountain substations based on 5G, quantum, and optical fiber. The communication transmission process between the master station and the plant station is the same as that of Embodiment 1. The difference from Embodiment 1 lies in the design process of the master station and the plant station.

[0026] The design process of the master station and the plant station in this embodiment includes: The design of the master station side device may include: redeploying the quantum platform in the production control area of ​​the master station, and the quantum platform is physically isolated from the wireless security access area of ​​the main network through a security isolation device; deploying a key agency service and / or a quantum security gateway in the wireless security access area of ​​the main network to perform quantum encryption communication with the quantum CPE on the plant side.

[0027] The design of the plant-side equipment may include: building a secure access area on the plant-side, adding a protocol gateway, forward and reverse isolation devices, a service gateway, a vertical encryption authentication device and / or a quantum CPE to build a secure quantum encryption communication transmission network.

[0028] A new quantum security service platform is built to construct a secure quantum encryption communication transmission network, which is physically isolated from the wireless security access area of ​​the dispatching master station in the production control area. At the same time, a secure access area is built on the substation side, and equipment such as protocol gateways, forward and reverse isolation devices, service gateways, vertical encryption authentication devices, and quantum CPE are added. In this embodiment, "5G+quantum encryption" under the new quantum platform is built, and physical isolation is performed in the production control area. At the same time, a secure access area is built on the plant side to build a secure quantum encryption communication transmission network. These transformation plans focus on the application of quantum technology to ensure the safe and reliable operation of the power system.

[0029] It should be understood that the embodiments are only used to illustrate the present invention and are not used to limit the scope of the present invention. In addition, it should be understood that after reading the content taught by the present invention, those skilled in the art can make various changes or modifications to the present invention, and these equivalent forms also fall within the scope limited by the appended claims of the application.

Claims

1. A method for encrypted transmission of substations in mountainous areas based on 5G, quantum, and optical fiber, characterized in that: include: Data upload process at the plant side: The plant side gateway transmits the data E file processed by the plant side data to the quantum CPE through the forward isolation device. The quantum CPE encrypts the data E file and completes an upload information interaction through the quantum security gateway of the wireless public network dispatching master station; The process of issuing commands on the master station side: The master station quantum security gateway receives the master station side command after pre-processing, encrypts it and transmits it to the quantum CPE via the wireless public network. After the quantum CPE decrypts the file, it is processed into a command E file on the plant side and sent through the inverting isolation device to complete a command interaction.

2. According to claim 1, a 5G, quantum, and optical fiber-based encrypted transmission method for mountain substations is characterized in that: The plant-side data uploading process also includes: the plant-side data is uploaded from the data communication gateway to the protocol gateway, and converted into a data E file via the protocol gateway; The quantum CPE is provided with a corresponding module for encrypting the data E file; The master station quantum security gateway receives the data E file and decrypts it, and then transmits it to the master station side scheduling system through a security isolation device.

3. According to claim 1, a method for encrypted transmission of substations in mountainous areas based on 5G, quantum, and optical fiber is characterized in that: The master station side command issuing process also includes: the master station side command is issued by the master station side scheduling system to the safety isolation device, and is transmitted to the master station quantum safety gateway via the front-end acquisition gateway; The quantum CPE is provided with a corresponding module for decrypting the command from the master station side; The master station side command generates a command E file via the service gateway and is finally transmitted to the data communication gateway.

4. A method for encrypted transmission of substations in mountainous areas based on 5G, quantum, and optical fiber according to claim 1, 2, or 3, characterized in that: Also includes: The master station side and the plant station side are respectively connected to the same quantum platform, that is, the quantum platform is respectively associated with the master station quantum security gateway and the quantum CPE on the plant station side; The master station side device and the plant station side device under the quantum platform are designed separately, and the communication process based on 5G, encryption and optical fiber is realized through access to the quantum platform to upload the plant station side data to the master station side and / or send the master station side command to the plant station side.

5. According to claim 4, a method for encrypted transmission of substations in mountainous areas based on 5G, quantum, and optical fiber is characterized in that: The design of the master station side device may include: the master station side is based on the quantum platform of the existing distribution network, a quantum security gateway is added in the wireless security access area between the operator and the main network, a firewall is added between the gateway to obtain the key and the quantum platform, the firewall allows the key to obtain the IP and port, and a quantum switch is added as an expansion interface.

6. According to claim 5, a 5G, quantum, and optical fiber-based encrypted transmission method for mountain substations is characterized in that: The design of the plant-side device may include: connecting the terminal network port on the field station side to the quantum CPE, and the CPE main network uses a SIM card to establish a quantum tunnel in the main station gateway to achieve link redundancy; The overall link between the main station and the plant station adopts a combination of 5G, quantum and wired optical fiber, with multiple links backing up each other. If the wired optical fiber fails, it will switch to the quantum tunnel link to complete the transmission.

7. According to claim 4, a method for encrypted transmission of substations in mountainous areas based on 5G, quantum, and optical fiber is characterized in that: The design of the master station side device may include: redeploying the quantum platform in the master station production control area, wherein the quantum platform is physically isolated from the wireless security access area of ​​the main network through a security isolation device; Deploy key proxy services and / or quantum security gateways in the wireless security access area of ​​the main network to conduct quantum encryption communications with the quantum CPE at the plant site.

8. The encrypted transmission method for mountain substation based on 5G, quantum, and optical fiber according to claim 7 is characterized in that: The design of the plant-side device may include: building a secure access area on the plant-side, adding a protocol gateway, a forward and reverse isolation device, a service gateway, a vertical encryption authentication device and / or a quantum CPE therein, to build a secure quantum encryption communication transmission network.

Images