继电保护定值在线发放管理系统及其安全防护  

The online distribution management system for relay protection fixed value and its security protection

作　　者：关亚东 许磊[2] 李中伟[1] 朱识天 谭凯 王艳敏[1] Guan Yadong;Xu Lei;Li Zhongwei;Zhu Shitian;Tan Kai;Wang Yanmin(School of Computer Science and Technology,Harbin Institute of Technology,Harbin 150001,China;School of Electrical Engineering&Automation,Harbin Institute of Technology,Harbin 150001,China)

机构地区：[1]哈尔滨工业大学电气工程及自动化学院,哈尔滨150001 [2]哈尔滨工业大学计算机科学与技术学院,哈尔滨150001

出　　处：《电测与仪表》2018年第23期7-14,21,共9页Electrical Measurement & Instrumentation

摘　　要：为实现继电保护定值的在线发放和满足定值在线发放过程中的机密性、完整性、真实性和不可否认性等安全需求,文中对继电保护定值在线发放管理系统的实现功能进行了分析,在此基础上,设计了定值在线流转、设备参数表上传、系统认证与访问控制、SSL/TLS协议通信模块;基于双因子身份认证、基于任务的访问控制策略和SSL/TLS协议,设计了基于安全信道的数据加密/解密方案和系统安全防护方案;采用C#语言、SQL数据库和OpenSSL开发工具,开发了具有定值单录入、定值单校核、定值单审批和设备参数上传等功能的继电保护定值在线发放管理系统。实际应用结果表明,该系统可实现继电保护定值的在线流转,满足定值在线发放过程中的安全需求。In order to realize the online distribution of relay protection value and meet the security requirements such as confidentiality,integrity,authenticity and non-repudiation in the process of online distribution of fixed value,this paper analyzes the demand for the online distribution management system of relay protection.This paper design fixed value online flow module,device parameter upload module,system authentication and access control module,SSL/TLS protocol communication module.Based on two-factor authentication,task-based access control strategy and SSL/TLS protocol,data encryption/decryption scheme and protection scheme of system security based on secure channel are designed.Using C#language,SQL database and OpenSSL development tools,the relay protection online distribution management system with functions of fixed value single entry,fixed value single check,fixed value single approval and equipment parameter uploading has been developed.The practical application results show that the system can reliably realize the online circulation of relay protection fixed value and meet the security requirement of online distribution of fixed value.

关 键 词：继电保护 定值在线发放 基于任务的访问控制 双因子身份认证 SSL/TLS 

分 类 号：TM77[电气工程—电力系统及自动化]