节点文献
电力二次系统网络信息安全防护的设计与实现
Design and Implementation of Secondary Electric Power System Network Information Security
【作者】 潘路;
【作者基本信息】 华南理工大学 , 电子与通信工程(专业学位), 2014, 硕士
【摘要】 在信息技术高速发展的今天,网络技术不断地应用到各种电力控制系统中,同时提高了国家电力系统的整体效率,特别是供电单位通过远程控制,减少操作人员,提高了工作效率,增加了效益。随着电力系统对网络应用需求的不断增加,与此同时,也对我国电力系统的安全防护方面提出了更高的要求。为了进一步推动电力系统的改革,建立完善的电力市场,国家根据我国电力系统的实际情况,参照国外先进的电力系统管理经验,制定了关于电力二次系统安全防护的相关安全防护法规,目的是规范我国电力二次系统的安全防护制度,统一规划安全防护方案,并使其得到有效的实施和监管,确保国家电力系统得以安稳地运行,为社会创造更大的效益。本论文依据国家电力监管委员会发布[2005]5号令《电力二次系统安全防护规定》和电监安全[2006]34号文《全国电力二次系统安全防护总体方案》等相关安全防护法规,通过实行“安全分区、网络专用、横向隔离、纵向认证”[1],综合利用各种安全防护技术,结合本人丰富的项目设计和实施经验,在满足电监会的硬性规定前提下,根据某电厂的实际情况,立项开展电力二次系统的安全防护设计和实施工作,最终实现了以下功能:一、将电厂网络系统实行严格的业务分区,分为实时区、非实时区及信息管理大区;二、在实时区纵向实现双重线路备分、三重安全防护、四重设备冗余;三、在非实时区纵向实现双重线路备份、三重安全防护、四重设备冗余;四、横向(即实时区与非实时区之间)实现双重线路备份、三重安全防护、三重设备冗余;五、管理信息大区与非控制区实现双重线路备份、双重设备冗余,三重安全防护;六、管理信息大区与控制区实现四重线路备份、四重设备冗余,五重安全防护。通过对某电厂电力二次系统安全防护的设计和实现,使某电厂电力系统能更进一步稳定、安全、可靠地运行,更有效地为广大民众服务。
【Abstract】 In today’s rapid development of information technology, network technology continuesto be applied to a variety of power control systems, while improving the overall efficiency ofthe national electricity system, in particular the power supply unit by remote control, reduceoperating personnel, increasing the efficiency. With the increasing power system networkapplications on demand, at the same time, but also on security aspects of the power systemput forward higher requirements. In order to further promote the reform of the electricitysystem, establish and improve the electricity market, according to the actual situation ofChina’s national power system, referring to foreign advanced management experience in thepower system, the development of the relevant safety regulations for secondary power systemsecurity, the purpose is to standardize China’s electric power system for a secondary safetysystem, unified planning security programs and their effective implementation andsupervision, to ensure a stable national electricity system to run, create greater benefits forthe community.In this paper, according to the State Electricity Regulatory Commission issued [2005]5orders "secondary power system security requirements" and electrical safety supervision[2006] No.34"national secondary power system security general scheme" and other relevantsafety regulations, by the implementation of "security partition, network-specific, horizontalsegregation, vertical certification"[1], utilization of various security technologies, combinedwith my extensive experience in project design and implementation, to meet the SERCmandatory premise, according to a power plant The actual situation, to carry out the projectdesign and implementation of security power secondary system, and ultimately achieve thefollowing functions: First, the plant network system of strict business district, into real-timearea, the non-real-time information management area and a large area; Second, in real-time toachieve the dual zone vertical line Backup, triple safety protection, quadruple redundancy;Third, in the area of non-real-time to achieve the double vertical line backup, security triplequadruple redundancy; four horizontal (ie, in real time between the district and thenon-real-time area) to achieve the dual line backup, triple safety protection, triple redundancy;five, management information region and non-controlled areas to achieve the dual line backup,dual redundancy, triple safety protection; six, management information large area and controlarea to achieve quadruple line backup, four heavy equipment redundancy, five heavy security protection. Through the design and implementation of a power plant secondary power systemsecurity, so that a power plant power system can be further stable, safe and reliable operation,more efficient service for the general public.
【Key words】 Secondary power system security; power of information security; HSRP; IDS; firewall;
- 【网络出版投稿人】 华南理工大学 【网络出版年期】2015年 01期
- 【分类号】TM73
- 【被引频次】24
- 【下载频次】1038