风电场监控通信安全解决方案  

A Security Solution for Monitoring and Control Communication in Wind Farms

作　　者：段斌[1] 林媛源[1] 黄凌翔[1] 于雄[1] 

机构地区：[1]湘潭大学信息工程学院,湖南省湘潭市411105

出　　处：《电力系统自动化》2009年第12期97-102,共6页Automation of Electric Power Systems

基　　金：国家高技术研究发展计划( 863计划)资助项目(2007AA012476);国家自然科学基金资助项目(50677058);湖南省教育厅重点科学研究资助项目(08A076)~~

摘　　要：根据风电场监控通信标准IEC61400-25提出的安全需求,深入分析了风电场监控通信过程的安全性,明确了访问控制和通信安全的重要性。依照电力系统数据和通信安全标准IEC62351-3设计了基于角色的访问控制(RBAC)组件以实现授权和访问控制,采用开放源码Matrix SSL构建传输层安全协议(TLS)通信安全组件以满足数据交换过程的机密性、完整性及身份认证等。最后构建了集成访问控制组件和通信安全组件的代理机制模型,并以其在风电机组控制器中的应用为例阐明安全代理机制的具体实现。该解决方案遵循IEC61400-25标准的信息模型和信息交换模型,紧密结合风电机组嵌入式环境的特点,符合IEC62351标准,满足风电场中监控通信的安全需求。The importance of access control and communication security in wind farms is discussed according to the security needs of international standard IEC 61400-25 and in depth analyses of the security of monitoring and control communication process. In accordance with IEC 62351, an access control module based on role based access control （RBAC） to achieve authorization and access control, and secure communication module utilizing TLS coding paekets--MatrixSSL are buih respectively to realize integrity, confidentiality, and authentication of data exchange. Finally a model of agent mechanism based on the access control module and secure communication module is constructed. An application to the wind turbine controller is modeled and analyzed to demonstrate the realization of the security agent mechanism. Based on the information model and information exchange model proposed in Standard IEC 61400-25 and considering embedded environment of wind turbine units, this design complies with international safety standard IEC 62351, and meets the demand of monitoring and control communication security in a wind farm.

关 键 词：风电场 监控通信 安全性 IEC61400-25 IEC62351 

分 类 号：TM614[电气工程—电力系统及自动化] TM73