冷水机组仪控系统信息安全技术  

Information security technology for instrument control system of water chiller

作　　者：唐政清 TANG Zhengqing(Gree Electric Appliances,Inc.of Zhuhai,Zhuhai 519000,China)

机构地区：[1]珠海格力电器股份有限公司,广东珠海519000

出　　处：《现代电子技术》2023年第10期83-87,共5页Modern Electronics Technique

摘　　要：冷水机组被广泛应用于机场、轨道交通、办公楼宇、医院、学校、商场、工业冷却、数据中心以及核电站等场合,其运行控制关联多个关键领域的安全。研究冷水机组仪控系统信息安全技术有利于降低工业控制网络安全风险,提升关键领域的信息安全。文中基于核电工程冷水机组,探索研究冷水机组仪控系统信息安全一体化防护技术,实现其信息安全设防等级为四级的要求。一体化防护技术包括:设计定制的内嵌式防火墙,建立数据包、数据包状态、数据包内容三级深度检测防护;通过数据加密、身份认证、攻击防御、安全监控与审计实现自身安全防御;使用安全性能更高的嵌入式主板控制实现控制安全防御。一体化防护技术也可为其他工业设备仪控系统的信息安全研究提供一种新的思路。Water chiller is widely used in airports,rail transit,office buildings,hospitals,schools,shopping malls,industrial cooling,data centers and nuclear power plants and other occasions,and its operation control is related to security in multiple key areas.Research on the information security technology of instrument control system of water chiller is beneficial to reduction of the risk of industrial control network security and improvement of the information security in key fields.Based on the water chiller of the nuclear power project,the integrated protection technology of the information security for the instrument control system of water chiller is explored and researched to meet the requirement of its information security fortification level(level 4).The integrated protection technology includes:design of customized embedded firewalls,and establishment of three⁃level deep detection protection for data packets,data packet status,and data packet content.The self security defense is realized by means of data encryption,identity authentication,attack defense,security monitoring and auditing.The embedded mainboard with higher safety performance is used to realize control over security defense.The integrated protection technology can also provide a new idea for the information security research of instrument control systems for other industrial equipment.

关 键 词：冷水机组 仪控系统 信息安全 核电工程 一体化防护技术 嵌入式防火墙 安全防御 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP393[电子电信—信息与通信工程] TP309[自动化与计算机技术—计算机应用技术]