【作者】 张强；

【导师】 黄国兵； 杨凯峰；

【作者基本信息】 西安工程大学 ， 工程硕士（专业学位）， 2021， 硕士

【摘要】 针对国家电网公司提出的加快建设电力监控系统网络安全管理平台的相关标准和要求,本文需要扩展实现泛在电力物联网中两类重要的嵌入式终端的网络安全功能,以达到实时监控、闭环管理的目的。为了达到设计方案的合理性、可行性,以及项目研究的目标,首先对所研究的微机远动终端(Remote Terminal Unit,RTU)和电能量远方终端(energy RTU,e RTU)的硬件平台、软件体系结构及工作原理进行了分析研究,掌握所研究对象的运行状况、机械结构和软硬件平台的具体实现技术;其次,对设备的功能需求及电力系统网络安全管理的建设目标和原则进行了分析研究,确保本文所设计实现的产品满足相关标准和规范;在此基础上,结合两种设备的自身情况,设计具体的解决方案对其网络安全功能分别予以实现。在完成项目前期的研究工作及总体方案设计之后,进行具体方案的实现工作。首先,提出了嵌入式终端网络安全自感知的解决方案,即设计网络安全探针模块,实现网络安全事件的探测功能;其次,根据要求,采集到的网络安全事件信息需采用专门的网络接口进行上报,对此,提出了使用串口终端服务器扩展网络安全通信接口,并设计了网络安全通信协议包,实现终端与网络安全管理平台的通信,达到安全事件信息上报的目标;第三,针对远动终端网络通信接口扩展困难的问题,采用嵌入式ARM处理器设计了一款网络安全代理装置,挂接在远动终端外部,与远动终端并行工作,采集远动终端的安全事件信息并上传到网络安全管理中心,使其也能达到国网公司网络安全管理的规范要求。最后,在实验室进行了设备组装和模拟软件调试,并对出现的误差进行了调整,结果正常后,又和NARI公司的网络安全管理装置进行了联调,结果表明,所设计方案的各项功能均达到了预期计划,所有软硬件模块都能正常且稳定工作,证明了项目研究所提出的解决方案的合理性与正确性。本项目为解决工业生产中的实际问题,采用了一定的新思路与新方法,项目的关键在于自感知模块的设计、网络安全通信接口的扩展、通信协议的设计和网络安全代理装置的设计实现四个方面,具有较高的实用价值和科技创新性。更多还原

【Abstract】 In response to the relevant standards and requirements of the State Grid Corporation for accelerating the construction of a power monitoring system network security management platform,this article needs to expand to realize the network security functions of two important types of embedded terminals in the ubiquitous power Internet of Things,so as to achieve the purpose of real-time monitoring and closed-loop management.In order to achieve the rationality and feasibility of the design plan,and the goal of the project research,firstly,the hardware platform,software architecture and working principle of the studied RTU and e RTU are analyzed and researched,and grasp the operating status,mechanical structure and specific implementation technology of the software and hardware platform of the research object;Secondly,it analyzes and studies the functional requirements of the equipment and the construction goals and principles of power system network security management to ensure that the products designed and implemented in this article meet the relevant standards and specifications;On this basis,combined with the conditions of the two devices,specific solutions are designed to realize their network security functions separately.After completing the preliminary research work and the overall plan design of the project,the implementation of the specific plan is carried out.Firstly,a solution for self-awareness of embedded terminal network security is proposed,that is,a network security probe module is designed to realize the detection function of network security events;Secondly,according to requirements,the collected network security event information needs to be reported using a special network interface.In this regard,it is proposed to use a serial terminal server to extend the network security communication interface,and design a network security communication protocol package to realize the communication between the terminal and the network security management platform,and achieve the goal of reporting security incident information;Thirdly,aiming at the problem of difficult expansion of network communication interface of RTU,a network security agent device is designed by using embedded ARM processor,which is connected to the outside of RTU,works in parallel with RTU,collects security event information of RTU and uploads it to network security management center,so that it can also meet the requirements of network security management of State Grid Corporation.Finally,the equipment assembly and simulation software debugging were carried out in the laboratory,and the errors that appeared were adjusted.After the results were correct,they were jointly adjusted with the network security management device of NARI.The results show that the functions of the designed scheme have reached the expected plan,and all the software and hardware modules can work normally and stably,which proves the rationality and correctness of the solution proposed by the project research institute.In order to solve practical problems in industrial production,this project adopts certain new ideas and new methods.The key to the project is the design of self-aware modules,the expansion of network security communication interfaces,the design of communication protocols,and the design and implementation of network security agent devices,it has high practical value and technological innovation.更多还原