上海电网调度二次系统安全防护策略分析  

ANALYSIS ON SECURITY AND PROTECTION OF SECONDARY SYSTEM FOR DISPATCHING SYSTEM IN SHANGHAI POWER GRID

作　　者：张王俊[1] 唐跃中[1] 顾立新[1] 

机构地区：[1]上海市电力公司调度通信中心,上海市徐汇区200025

出　　处：《电网技术》2004年第18期20-24,61,共6页Power System Technology

摘　　要：针对上海电网各级调度监控系统和数据网络的安全防护,指出安全的重点在于控制安全、信息安全和应用系统的安全。提出了安全防护分区原则和“胖 III 区、瘦 II 区”的分区方案。为适应网络安全分区和安全隔离的需要,横向上建立电网调度自动化系统数据中心统一支撑平台,纵向上建设基于异步传输模式 ATM 的上海电力调度数据网(Shanghai Power Dispatching Network,ShPDnet)和基于多业务传输平台 MSTP 的电力数据通信网(Shanghai PowerTelecommunication Network,ShPTnet),并分析了安全防护实施过程中应注意的事项。作者提出的防护方案体系结构清晰,有利于应用系统的整改,从而保证上海电网调度核心业务系统的安全稳定运行。According to the requirement of the security protection strategy for supervisory control dispatching systems in all-levels and data communication network in Shanghai power grid, it is pointed out that the key problems lie in the security of control, security of information and security of application systems. Therefore, the partitioning principle of security protection is put forward and the partitioning scheme including the 'fat' third zone and the 'thin' second zone is given. To meet the need of secure partitioning of the network and secure isolation, a unified supporting platform for the data centre of Shanghai power dispatching automation system is transversely established and an ATM based Shanghai Power Dispatching Network (ShPDnet) and a MSTP based Shanghai Power Telecommunication Network (ShPTnet) is also longitudinally established, the items which should pay attention to during the implementation of security protection are analyzed. The architecture of the proposed security protection scheme is clear and such an architecture is beneficial to the renovation of the application systems, so the secure and stable running of the kernel businesses in Shanghai power grid dispatching are ensured.

关 键 词：上海 策略分析 核心业务 事项 电力调度数据网 实施过程 数据中心 电网调度自动化系统 安全稳定运行 二次系统 

分 类 号：TM73[电气工程—电力系统及自动化] TM734