Study On Architecture And Key Technology Of Assistant System's Security Engineering In Chongqing Electric Power Grid

With the development of communications and network technology, more and more power control systems are connected into the power grid. The data interchange among dispatch center, electric plant, substation and customers is increasing quickly. It's a great challenge for the security and reliability of the power network and control systems. Because we paid little attention to the security problem when the power control systems were designed and built, a lot of bugs exist in the systems, which make the power system dangerous. Based on the assistant system's security engineering of Chongqing electric power grid, this article describes the method, architecture and key technology of security engineering under current condition.Power control systems were built one by one, so there was not a general plan for interconnection of them. This made the network jumbled, too many connections, and no clear border between systems. Even if we install security devices, they are easily bypassed. This article describes a scheme of dividing areas. According to the characteristic, importance, data flow, current state and security requirement, the power control systems are divided into four security areas as followings: real time control area (area I), non control producing area (area II), producing management area (area III), management information area (area IV). The different security level of area I has the highest level, and other's is step-down from II to IV. Different security defenses are adopted in different area, and no defense between systems in same area. Technology policy is made out, which demand that every dispatch center must modify their network according to the scheme just mentioned. Systems in different dispatch centers but in the same area are interconnected by the dispatch network, so four large areas are formed in the whole power network. This scheme of dividing area makes the network and borders between systems clear, and will help to install the security devices. In dispatch center, security devices such as firewall, physical partition device are installed, and between dispatch centers, encrypting devices will be installed.According to the characteristic of power system, the physical partition devices developed by us are installed between area I, II and area III, IV. At the same time, we must make sure the availability after installing it. This is the key technology that will be discussed in this article. Physical partition device is based on the principle of"information ferry", two CPUs are put into the device to make sure that there are no...