新型电力系统数据跨域流通泛安全边界防护技术  

Ubiquitous Security Boundary Protection Technology for Cross-domain Data Circulation in New Power System

作　　者：郭少勇[1] 刘岩[1] 邵苏杰 臧志斌 杨超 亓峰[1] GUO Shaoyong;LIU Yan;SHAO Sujie;ZANG Zhibin;YANG Chao;QI Feng(State Key Laboratory of Networking and Switching Technology(Beijing University of Posts and Telecommunications),Beijing 100876,China;State Grid Information and Communication Industry Group Co.,Ltd.,Beijing 102211,China;State Grid Liaoning Electric Power Supply Co.,Ltd.,Shenyang 110006,China)

机构地区：[1]网络与交换技术国家重点实验室(北京邮电大学),北京市100876 [2]国网信息通信产业集团有限公司,北京市102211 [3]国网辽宁省电力有限公司,辽宁省沈阳市110006

出　　处：《电力系统自动化》2024年第6期96-111,共16页Automation of Electric Power Systems

基　　金：国家重点研发计划资助项目(2022YFB3105102)。

摘　　要：新型电力系统建设涉及多业务系统、多部门、多方主体间进行海量、异构数据的交互和共享,电力数据的内外部网络环境与安全形势日趋复杂化,数据流通的脆弱性风险加剧。首先,分析新型电力系统下数据流的类型与特性,概括电力数据流通安全防护面临的新形势;其次,基于专用数据处理器(DPU)的高性能流量编排和多功能安全网关能力,构建面向电力数据跨域流通安全增强的泛安全边界,凭借数据面可编程技术沟通网络安全与数据安全双维度安全能力,提出基于DPU的数据跨域流通协同防护技术应用方案;最后,阐释DPU在不同电力通信网络层次的部署方式、价值与关键技术,分析现阶段DPU在电力领域应用存在的挑战。The construction of the new power system involves interaction and sharing of massive and heterogeneous data among multiple business systems,departments,and agents.The internal and external network environment and security situation of power data are becoming increasingly complex,and the vulnerability risk of data circulation increases.First,this paper analyzes the types and characteristics of data flow in the new power system,and summarizes the new situation faced by the security protection of power data circulation.Then,based on the high-performance traffic orchestration and multifunctional security gateway capabilities of the data processing unit(DPU),the ubiquitous security boundary is constructed to enhance the security of power data cross-domain circulation.With the help of data-plane programmable technology,the dual-dimension security capabilities of network security and data security are communicated,and a DPU-based application scheme of collaborative protection technology for the cross-domain data circulation is proposed.Finally,this paper explains the deployment methods,values,and key technologies of DPU at different levels of power communication networks,and analyzes the challenges of DPU application in the power industry at present.

关 键 词：新型电力系统 数据流通 专用数据处理器 数据安全 网络安全 安全防护 

分 类 号：TM73[电气工程—电力系统及自动化] TP309.2[自动化与计算机技术—计算机系统结构]