电力信息网络安全隔离设备的研究

政府机关或企业上网后，必须对关键的网络进行有效的信息隔离。作者介绍了专为电力实时控制网络研制的安全隔离设备，它采用双嵌入式计算机结构实现物理层的隔离。采用MAC/IP地址、协议类型及端口等的综合过滤与认证鉴别的访问控制技术，并实现了电力行业标准通信协议的应用代理，从链路层、网络层、传输层、应用层实现有效的隔离。测试证明：在提供透明的网络服务的同时，隔离设备的安全性能有极大的提高，其传输延迟和吞吐量能满足电力系统实时控制的要求。

SECURITY ISOLATING DEVICE FOR POWER REAL-TIME NETWORK

After the organs of government or the enterprises are connected with internet it is necessary to effectively isolate the information in important inner network. A dedicated security isolating device for power real-time control network is presented here in which the embedded dual-computer is used to implement the information isolation on physical layer. Using the access control technique for integrating packet filtration and authentication such as MAC/IP address, protocol type and port, the application proxy of the standard communication protocol in electric power industry is realized and the isolations on data link layer, network layer, transport layer and application layer are effectively implemented. Testing results show that the presented device can be transparently employed in power real-time control network, the security of the isolating device is greatly improved, the transmission delay and the throughput can meet the need of power system real-time control.