继电保护定值在线发放管理系统及其安全防护

为实现继电保护定值的在线发放和满足定值在线发放过程中的机密性、完整性、真实性和不可否认性等安全需求,本文在对继电保护定值在线发放管理系统进行需求分析的基础上,设计了定值在线流转、设备参数表上传、系统认证与访问控制、SSL/TLS协议通信模块；基于双因子身份认证、基于任务的访问控制策略和SSL/TLS协议,设计了基于安全信道的数据加密/解密方案和系统安全防护方案；采用C#语言、SQL数据库和OpenSSL开发工具,开发了具有定值单录入、定值单校核、定值单审批和设备参数上传等功能的继电保护定值在线发放管理系统。实际应用结果表明,该系统可实现继电保护定值的在线流转,满足定值在线发放过程中的安全需求。

Relay protection fixed value online distribution management system and its security protection

In order to realize the online distribution of relay protection value and meet the security requirements such as confidentiality, integrity, authenticity and non-repudiation in the process of online distribution of fixed value, this paper analyzes the demand for the online distribution management system of relay protection. This paper design fixed value online flow module, device parameter upload module, system authentication and access control module, SSL/TLS protocol communication module. Based on two-factor authentication, task-based access control strategy and SSL/TLS protocol, data encryption/decryption scheme and protection scheme of system security based on secure channel are designed. Using C# language, SQL database and OpenSSL development tools, the relay protection online distribution management system with functions of fixed value single entry, fixed value single check, fixed value single approval and equipment parameter uploading has been developed. The practical application results show that the system can reliably realize the online circulation of relay protection fixed value and meet the security requirement of online distribution of fixed value.