输电线路分布式故障诊断系统的信息安全防护设计及应用

输电线路分布式故障诊断系统作为特高压输电故障位置定位服务的关键产品应用,对电力系统的安全、可靠与经济运行具有重要意义。文中结合实际系统的研制与应用,提出了一种基于安全防护的分布式故障诊断监测终端系统的安全链路应用方法。该方法通过监测终端嵌入加密芯片接入安全网关,通过安全网关过滤后接入监控运维中心,监控运维中心通过正向单向隔离与App服务器单向通信,App服务器通过身份认证、数字签名与手持移动终端建立安全通道。通过全链路的可信改造,有效地阻止恶意程序攻击、恶意代码植入攻击、网络窃听以及嗅探攻击。通过监控运维中心的身份校验和主备机双机数据备份,保障了监控运维中心的数据安全和运维操作安全。所述系统产品已顺利通过安全测试与认证并在陕西省特高压交流1 000 kV输电线路上挂网运行,取得了安全稳定运行的实际效果。

Design and Application of Information Security Protection for Distributed Fault Diagnosis System of Transmission Line

As the key product application of fault location service for ultra-high voltage(UHV)transmission system, the distributed fault diagnosis system of transmission line is of great significance to the safety, reliability and economic operation of power system. By combining the development and application of practical system, this paper proposes a secure link application method for distributed fault diagnosis and monitoring terminal system based on security protection. This method uses the monitoring terminal embedded encryption chip to access the security gateway. After filtered by the security gateway, the access to the monitoring and maintenance center can be done. Isolated by the forward device, the monitoring and maintenance center sends message to App server station one way by means of identity authentication and digital signature, and the App server establishes a secure channel for mobile terminal. Through the trusted transformation of the entire link, malicious program attacks, malicious code implantation attacks, network eavesdropping and sniffing attacks are effectively prevented. By the identity checksum of the monitoring and maintenance center and the backup of the dual-machine data of the main/standby machine, the security of data and maintenance operation of the monitoring and maintenance center are guaranteed. The described system products have successfully passed the safety test and certification, and run steadily and reliably on the 1 000 kV UHV AC transmission line in Shaanxi Province of China.