基于报文识别与流量管控的智能变电站保护控制信息安全防护方法  

Information Security Protection Method for Smart Substation Communication Network Based on Message Identification and Flow Control

作　　者：席禹[1] 邹俊雄[1] 蔡泽祥[1] 苏忠阳 

机构地区：[1]华南理工大学电力学院,广东省广州市510640 [2]广州至德电力科技有限公司,广东省广州市510530

出　　处：《电网技术》2017年第2期624-629,共6页Power System Technology

基　　金：国家自然科学基金项目(51577073);广东省自然科学基金(2016A030313476)~~

摘　　要：针对智能变电站保护控制信息安全风险的防范问题,提出了智能变电站保护控制信息安全风险防护的三道防线模型,包括以防入侵风险为核心的第一道防线、以防传播风险为核心的第二道防线和以防失效风险为核心的第三道防线。进一步,针对第二道防线防传播风险技术的薄弱环节,提出了基于报文识别与流量管控的保护控制信息传播风险防护方法以及相应的安全交换模型,并基于OPNET搭建了智能变电站保护控制信息传播风险防护的仿真平台。仿真结果表明所提出的保护控制信息传播风险防护方法在正常运行情况下能够优化报文处理机制,在异常情况下能够保障关键报文的可靠传输,从而有效提升了智能变电站通信网络的抗风险能力。Aiming at problem of information security and precaution on protective control information of smart substation, this paper puts forward a three-defensive-line model for protective control information of smart substation. The model includes the first line focusing on invasion risk, the second line focusing on spread risk and the third line focusing on invalidation risk. Furthermore, considering weak links of the second line, this paper proposes a protection method and corresponding secure data exchange model on spread risk of protective control information, and establishes a simulation platform for this method. Simulation results show that protection on spread risk of protective control information can optimize message handling mechanism under normal circumstances, and guarantee reliable transmission of key message under abnormal situation. Therefore, the protection method proposed in this paper can raise anti-risk ability of smart substation network effectively.

关 键 词：智能变电站 信息安全 三道防线 令牌桶 报文识别 流量管控 

分 类 号：TM72[电气工程—电力系统及自动化]