Research On Distribution Automation Communication Based On XMPP And GOOSE Security Hardening

In order to meet the growing power demand of power users,the ubiquitous power Internet of Things(UPIo T)and smart grid have begun to integrate and develop.As the last link to connect users,the distribution network has a direct impact on the user's power supply quality and power reliability.The Smart Terminal Unit(STU)is the key equipment for monitoring and controlling the operation of the distribution network.The IEC TC57 working group is developing the e Xtensible Message and Presence Protocol(XMPP)protocol in IEC 61850 8-2,which can realize the interconnection and intercommunication between STUs in the distribution network and ensure communication security,but it cannot be achieved by using only the XMPP.It meets the information interaction time requirements of fast-acting distributed feeder automation(FA).Therefore,this paper adopts a communication mapping scheme combining built-in security XMPP and GOOSE over UDP based on one-time signature of HORS.A test system is established to verify the real-time nature of XMPP,a distributed FA test system based on proxy is developed,and GOOSE over UDP is tested.Transmission performance.Specific research contents include:(1)Analysis of the real-time and security requirements of the distribution automation system communication.The communication structure and characteristics of the distribution automation system are summarized,and typical application scenarios such as FA and distributed Energy Resources(DER)are analyzed.According to the communication performance and safety requirements of the distribution network,the requirements of IEC 61850 when it is applied to the distribution network are summarized.Real-time and security requirements.(2)Based on the real-time and security requirements of the distribution network,the communication mapping scheme based on the combination of XMPP and GOOSE over UDP is analyzed and defined.The virtual power plant based on DER is analyzed,and the information model of the DER monitoring terminal is established.According to the real-time requirements of the distribution network,the communication using GOOSE over UDP to transmit real-time data and XMPP to transmit non-real-time data is determined Mapping scheme.In order to meet the security requirements,the built-in security mechanism of XMPP and the security protection scheme based on HORS one-time signature to ensure the security of GOOSE over UDP communication are analyzed.The mapping principle of the scheme in the distribution network.(3)Developed an agent-based distributed FA test system,verified the real-time performance of GOOSE over UDP,built a test system to simulate DER communication,and verified the real-time performance of XMPP.The test system consists of an active static simulation platform for the distribution network,communication network,STU and PC.The test program is developed using C ++ in the embedded Linux operating system environment.The test system test program is developed based on the Smack class library.The XMPP server uses Openfire.The test mainly includes the encryption and decryption delay test of GOOSE over UDP and the impact of network congestion on transmission,and the impact of different message sizes and network load rates on XMPP communication.Compared with the existing mapping schemes,the communication mapping scheme combining XMPP and GOOSE over UDP meets the requirements of DER and the regional slow distributed FAs,and can basically meet the regional quick distributed FAs.The IEC 61850 standard is applied to distribution automation systems.It establishes a standard information model,regulates the mapping schemes for service mapping,XMPP,and GOOSE over UDP with security hardening.It can be distributed in the integrated development of the UPIo T and smart grid.The interconnection of intelligent terminals such as STU of distributed FA and distributed power monitoring terminal provides a safe,fast and effective communication method for the horizontal and vertical distribution network.