论文部分内容阅读
随着信息技术的发展,电力工业的信息安全已成为影响电力系统稳定运行的重要问题。IEC 61850标准的推出对变电站通信系统与网络提出了新的要求,其中有关智能电子设备(IED)的访问 安全管理是确保操作主体身份与授权合法的关键问题。IEC 61850要求使用虚拟访问视图实现 IED的访问安全,而公钥基础设施／权限管理基础设施(PKI／PMI)体制正在电力系统企业中广泛 推行,通过设计专用的认证访问处理模块实现二者的有机结合,采用基于角色的访问控制(RBAC) 模型设计了满足多用户、多角色需求的访问控制方法。通过对执行过程的实时性分析,证明该系统 能够满足IED的实时控制要求。系统设计紧扣IED虚拟访问视图设计标准和多类电力自动化应 用系统统一管理的实际需要,相关的密码算法遵循国家密码管理局的商用密码管理条例,设计内容 既符合国际标准的发展方向,为电力系统通信安全标准的制定提供了参考,又能满足国家对信息安 全方面的特殊要求。
With the development of information technology, information security in power industry has become an important issue that affects the stable operation of power system. The introduction of the IEC 61850 standard sets new requirements for substation communication systems and networks. Access security management for intelligent electronic devices (IEDs) is a key issue to ensure that the identity and authorization of the operating entity are legitimate. IEC 61850 requires secure access to IEDs using virtual access views, and the PKI / PMI infrastructure is being widely implemented in power system enterprises by designing dedicated authentication access processing modules to implement both the organic Combined with the role-based access control (RBAC) model, an access control method is designed to meet the multi-user and multi-role requirements. Through the real-time analysis of the execution process, it is proved that the system can meet the real-time control requirements of IED. The system design is closely linked to the actual design requirements of the IED virtual access view design standard and the unified management of various types of power automation application systems. The related cryptographic algorithms follow the commercial password management regulations of the State Administration of Password Control. The design content accords with the development direction of international standards, System communication safety standards to provide a reference, but also to meet the country’s special requirements for information security.