【作者】 王静；

【导师】 吴健；

【作者基本信息】 西北工业大学 ， 计算机软件与理论， 2006， 硕士

【摘要】 随着电力信息系统在局域网和广域网中的广泛应用,信息安全状况的恶化己经使如何提高电力信息系统的信息安全性成为了电力信息领域中一个研究热点和需求点。 本文以解决电力信息系统中信息安全问题为目标,选取典型的分布式电力监控系统进行分析和设计,从电力监控系统安全问题产生的原因和特点出发,针对非法用户的访问、合法用户的误操作以及信息传输过程中的安全性问题,从身份验证、访问控制、数据完整性和机密性等方面对进行了应用方面的分析、研究与实现。 论文在详细讨论典型的分布式电力监控系统模型的基础上,分别对信息访问安全、信息传输安全和移动通信服务安全进行了研究与设计。在信息访问安全中,基于常见的身份认证、访问控制和安全审计技术,提出并实现了基于口令的身份认证、基于角色的访问控制和基于日志的安全审计相结合的安全防护方案,解决了电力监控系统中非法用户的访问以及合法用户的误操作问题;在信息传输安全中,基于所选用的CORBA中问件和Web Service平台,对数据完整性、保密性、数字签名等问题进行了平台延展,提出了适用于电力信息系统的信息传输方案,解决了局域网和广域网中的信息传输安全问题;在移动通信服务安全中,针对GSM技术在系统中的应用特点,选取恰当实用的身份认证、访问控制和信息加密技术,对远程信息传输的完整性、保密性等进行分析,并给出了可行的解决方案。 电力信息系统的应用改变了电力系统落后的工作方式,节省了人力物力资源,提高了电力系统管理的自动化水平和工作效率。本文中分析和设计的解决方案大部分已经在YSS2000电力监控系统中实现。该系统已经在多个电厂及变电站得到使用,系统运行安全效果良好。更多还原

【Abstract】 Along with the widely using of the electric power information system in both LAN and WAN, the labefaction of network’s security status threatens the security of computer. In allusion to the security problems that electric power information system faces, how to enhance the security and capability to protect the system against attacks becomes a new research hotspot and new requirement.In this thesis, we set our target on solving the security problems in electric power information system, and choose a typical distributed power supervisory control system for our analysis and design. Form analyzing the cause and characteristics of security problems in the current power distributed supervisory control system, according to avoid the access of illegal user, the illegal access of legal user and the dangers in data transfer, we study the identity authentication, access control, data integrity and also data confidentiality from the viewpoint of application.Based on discussing the modal of the typical power distributed supervisorycontrol system, we study the security of information access, data transfer and mobilecommunication services separately. In the chapter about the security of informationaccess, based on analyzing the familiar technology of identity authentication, accesscontrol and security audit, we carry out a System Security Service which can solve theaccess problems in distributed power supervisory control system based on password,RBAC and security audit of log file. In the chapter about the security of data transfer,based on the platform of CORBA middle ware and Web Service, we put forward apractical modal which is suit for solving the data transfer problems both in LAN andWAN using the technology of data integrity, data confidentiality and digital signature.In the chapter about the security of mobile communication services, based onconsidering the characteristics of GSM technology in power distributed supervisorycontrol system, we put forward a scheme to secure the data integrity and dataconfidentiality in mobile communication based on identity authentication, accesscontrol and information encryption.Besides changing the work pattern of the power factories, the using of electric power information system also saves the resources of manpower and material resources, and it really raises the level of automata and work efficiency in the power system. The main part of our scheme which referred in this thesis has been designed and programmed in YSS2000 Distributed Supervisor Control and Configuration.>y>>icji). This system is now running satisfactorily in many power factories and transformer substations.更多还原