Embodiment
Following examples only are used to illustrate the present invention, are not used for limiting protection scope of the present invention.
Information gathering of the present invention and the system assumption diagram of reporting and submitting system are as shown in Figure 1.
In Fig. 1, from laterally, according to supervised entities' type and the supervision information attribute that obtains, can be the power monitoring information gathering be divided into two aspects on the system architecture architecture logic with reporting and submitting: the upper strata mainly is that the credible interconnection layer of unifying door by power monitoring between our department of Electricity Monitoring Commission and each general headquarters of Utilities Electric Group Co. then is the safe access between agency of Electricity Monitoring Commission and all kinds of electric power enterprise.Require the regulation of all kinds of electric power enterprises according to " power monitoring regulations " and auxiliary law thereof, the information system that enterprise is relevant with power monitoring inserts the power monitoring information system, realizes the non-at-scene supervision of power monitoring mechanism to electric power enterprise.
From vertically, the power monitoring data acquisition with report and submit system of systems can be divided into three grades: power monitoring data collection layer, electricity prison office data branch center, zone and data center of our department of Electricity Monitoring Commission.Deployment secure access device in electric power enterprise realizes that the safety of power monitoring information is gathered; Electric prison office sets up data sub-central in the zone, realizes the centralized stores of regional power monitoring information; Set up data center in our department of State Electricity Regulatory Commission, the power monitoring information that each regional power monitoring mechanism is gathered transfers to data center of Electricity Monitoring Commission after treatment, thereby realizes the centralized stores of power monitoring data and share.
From the above, can be divided into safe access device, collection server and types such as management and watch-dog with the power monitoring information gathering with reporting and submitting the relevant capital equipment of system.Wherein, safe access device is used for the information system security relevant with power monitoring of electric power enterprise is linked into the power monitoring information system, gathers the required various information of power monitoring work in good time; Collect department server and be deployed in agency of Electricity Monitoring Commission and our department of Electricity Monitoring Commission, be used to receive the power monitoring information that peace people access device is gathered; Management and watch-dog are deployed in our department of Electricity Monitoring Commission or the agency, and the unification that is used for unified management safety access device running status is monitored in real time.
In the said equipment, safe access device is used for directly and the electric power enterprise information system is joined, and amount is wide, be power monitoring information gathering and the key of reporting and submitting system's construction, therefore, the operation principle of the safe access device of following foundation proposes the parameters and the requirement of this equipment, in order to the research and development of this equipment of standard.
The operation principle of safe access device as shown in Figure 2.
Safe access device the various adaptive collection agencies of the information system database server deploy relevant with power monitoring of electric power enterprise, is delivered to safe access device to data by gathering the agency based on agency's----main frame computation schema.
Safe access device is at first the power monitoring information cache that is received, after finishing the integrity check of institute's image data according to power monitoring information gathering index, converting unified power monitoring information coding and transformat to, digital signature is carried out to it in the compression back, delivers to network at last and once is transferred to backstage collection server from escape way.Functional modules such as the configuration of the configuration of power monitoring information gathering strategy, the configuration of security strategy, routing policy, IPSEC safe transmission tunnel, facility registration authentication, daily record and equipment state report have constituted the function support system of safe access device together.
Network security inserts part
The network security access device is one of major function of safe access device, is to realize power monitoring information gathering and the basis of reporting and submitting system's access and data acquisition.
Utilize safe access device can realize the access of multiple network form, as private network access, public network access etc.
System provides the safety guarantee function of high reliability, and information security all is very necessary for evading the supervision risk, safeguarding by the supervision holding of a unit.The safety guarantee of safe access device requires to be mainly reflected in aspects such as authentication, data encrypting and deciphering, integrity check, and has the characteristics with the existing safety supports platform compatibility of State Electricity Regulatory Commission.
In addition, the power monitoring information gathering is a nationwide network service system with reporting and submitting system, system's operational management scale has the advantages that scope is wide, the access device amount is big, therefore, one efficiently whole network equipment centralized operation maintenance system be a major function requirement of system.For this reason, the power monitoring information gathering with report and submit system that patterned plant maintenance and the whole network state dynamic monitoring are provided, to the maintenance of network, the instrument that system upgrade upgrades and maintenance provides dress to liquefy of equipment, to guaranteeing the continual and steady operation of safe access device, to whole power monitoring information gathering with report and submit the efficient organic management of system that specialized basic platform is provided.
Part of data acquisition
This part mainly refers to obtain production, the management information relevant with power monitoring from the information system relevant with power monitoring, simultaneously acquired information is imported data center.Bring potential safety hazard for quilt supervision unit information system for avoiding because the supervisor directly visits by supervision unit information system database, require to obtain information needed by the indirect safety of this equipment by supervision unit deployment secure access device.
The data acquisition function of safe access device mainly comprises data migration and processing, transfer of data, data centralization three parts.
Data migration and processing, it mainly is requirement according to power monitoring data-interface standard, from being obtained the business datum relevant the supervision unit information system with power monitoring, and the data that get access to are delivered in the data buffer area of safe access device, and then these data are carried out operations such as data encryption, compression, integrity check.
Transfer of data, mainly be meant based on suitable network connection, host-host protocol and data format (as XML etc.), safe access device by being deployed in electric power enterprise and be deployed in the collection server of regional power monitoring mechanism, the packet through processing such as encryption, compression and integrality mark in the data acquisition reconciled data buffer area is sent to regional power monitoring mechanism, and accordingly it is carried out depositing each regional power monitoring organization data center in behind decompress(ion), data decryption, the integrity check.
Data centralization, mainly be meant based on the power monitoring network infrastructure, with suitable host-host protocol, data format, under the situation that guarantees the transmission data security, in the heart data in each regional power monitoring organization data are sent to the power monitoring data center of our department of State Electricity Regulatory Commission, realizing concentrating of power monitoring data, at first statistics, analysis, decision-making work on national aspect provides the support of comprehensive power monitoring information.
The power monitoring information system will be supervised the electric power enterprise that is distributed in the whole nation, because the independence of each electric power enterprise system, all there be a sets of data storehouse and the data format of oneself in possible each system, this has just caused the data between system to share, data silo appears, we have and the system of each electric power enterprise can not be unified, therefore safe access device is when solving each electric power enterprise supervision information implementation data access, must carry out data fusion efficiently, solve the reunification and the data sharing problem of data in the heterogeneous system.
In solving heterogeneous system aspect the problem of uniform data and data sharing, safe access device system adopts based on the XML message-switching technique, realizes the unified information access and the information exchange of isomery information system.
Safety guarantee
Because power information is the key message that is related to national economy, so information security all is very necessary for evading the supervision risk, safeguarding by the supervision holding of a unit.The safety guarantee of safe access device requires to be mainly reflected in aspects such as identification authentication authentication, data encrypting and deciphering, integrity check, and compatible mutually with Electricity Monitoring Commission existing safety supports platform.
Safe access device is positioned on the border of electric power enterprise information network and power monitoring Access Network, in order to realize the credible interconnection of power monitoring private network and electric power enterprise information network, require safe access device to have and to prevent the security network management function that illegal network connects, possess the network address translation function of difference between the shielding different IP addresses coding scheme.
Safe access device possesses the static routing function, support at least simultaneously 0SPF (OpenShortest Path First, RFC2328), RIP (Routing InformationProtocol, RFC1058) two kinds of dynamic routing protocol.
Aspect network carrying business expansion ability, safe access device possesses the ability that various network services is supported in expansion, possesses QoS (Ouality of ServiceRFC2676,2386) function.
Aspect the physical security standard, safe access device has the physical locks function, and electromagnetic exposure meets the relative national standards standard.
Aspect Network Transmission channel security standard, based on IPSec (IP Security, RFC1829,2406,1828,2402,2401,2104,2085,2410,2411,2412,2451,2403,2404,2405,2406,2407,2408,2409,2857,3526,3554,3566,3602,3664,3686,3706,3715,3947,3948) safe practice realizes that safe access device and power monitoring insert the fail safe of the network connection of setting up for transferring electric power supervision information between the data collection server, the existing safety supports system compatibility of implementation and power monitoring information system, cryptographic system adopts the approval of national password committee, cryptographic algorithm with independent intellectual property right, possess the ability that is configured according to demand for security, make the security path can the passing through NAT gateway simultaneously.
Aspect facility registration authentication standard, safe access device adopts the device certificate system to verify its legitimacy, and the facility registration process is compatible mutually with the Electricity Monitoring Commission security infrastructure.
Aspect digital signature and daily record standard, the power monitoring information of being gathered through the safety access device adopts diploma system that information is signed, and this digital signature of daily record.
According to above-mentioned systemic-function, the system configuration of safe access device as shown in Figure 4.Wherein hardware platform partly provides the application system of technical grade, adopts the chip series based on Intel or AMD.Operating system adopts popular mainstream operation system at present, comprises Windows series, Linus series and FreeBSD and OS/2 etc.IPSec VPN layer is the core key stratum of safe access device, network VPN application foundation based on IPSec is provided, system provides the support of all IPSec at present, provides based on the data encryption technology of DES, 3DES, AES, BlowFish, NULL-ESP scheduling algorithm with based on the data detection technology of MD5, SHA1 algorithm.
The application Access Layer of being responsible for the XML information exchange is to realize all and power monitoring information gathering and the access key of reporting and submitting the relevant isomeric data of system, and the architecture of this application Access Layer as shown in Figure 5.
Based on the information service layer message-switching technique of XML, meet the international standard that ecommerce is generally acknowledged, simplified the hierarchical structure of application protocol, the condition of unified access, unified application and unified management is provided for the safety access device.Information exchange principle wherein is: with different user, use different system, service request and response message by different communication circuit and service provider that communication protocol sends to are converted into unified information format, request and response message with service end also is converted to unified information format simultaneously, like this, if service request between user terminal and the service provider and response message are realized user and service end coupling by an information exchange mechanism, under the prerequisite that does not directly provide user terminal to arrive complicated network connection of service end and communication protocol, can realize that user side visits different service ends by uniline, service end also provides service by uniline for different user, realizes the transparent service of user to the Any-to-Any of service provider.
The XML data exchange mode as shown in Figure 6.As can be seen from Figure 6, the Design Mode of exchanges data has increased IAD and gateway, thereby the whole application system pattern is expanded to five-layer structure by three-decker, it is client, terminal inserts, information exchange, application proxy and service layer, make that each service system does not need to be used for different application and to require to set up various communication systems for satisfying difference, the information processing system of agreement, and only need insert Data Exchange Platform according to a kind of uniform communication agreement by a unified circuit, just can be for various terminal systems provide the types of applications service, response user's various requests.Same, terminal system does not need the communication system by special use in order to obtain certain service yet, only need insert switching plane, the service that the service system that just can meet with a response easily provides according to common communication system easily.Really accomplish the notion of " some access, the whole network service " of the user's request of power monitoring information system.
The data that are described by XML can form general form and unified interface and exchange and represent: the data of homology are not packaged in the XML packet, these data are surrounded by unified data packet head, and they have comprised a lot of processing parameters and in order to carry out the description of the special field that safety and transaction prepare.The structure of the packet of describing based on XML (iSML) of Data Exchange Platform is as follows:
The information envelope |
Business datum |
Wherein information envelope (Envelop) data cell is the information head that all comprises in all iSML packets, is referred to as the information envelope.It represents the attribute of the information that each transmits in information exchange platform.The information exchange of information exchange platform mainly is to determine the source and the purpose of information according to the information envelope in the iSML packet, and carries out information exchange and handle.
The structure of information envelope as shown in Figure 7.Information attribute when the information exchange platform envelope is illustrated in information and number changes platform and carry out message transmission.It comprises the following information content:
Information type (ActivityType)---information type is divided three classes: administrative class (Administration), inquiry class (Inquery), transaction thunder (Transaction) information.Information exchange platform is handled according to different information types when information is handled.
Source service ID (SourceID)---SourceID is ID number of platform of solicited message transmit leg.
Place service ID (DestinationID)---DestinationID is platform ID number of final reciever of solicited message.
Service serial number (TransmissionID)---service serial number is used to indicate the request of a service and reply.In a pair of service request with in replying, the service serial number should be identical.That is to say that service end should be replied according to requesting party's service serial number when the answer service request.
Version number (Version)---version of presently used data definition (DTD) file represented.
Session number (SessionID)---be illustrated in the session sign in the service processing of session-oriented.
The date (DateOfServICE) is initiated in service--and-expression service produces the date.
Service initiation time (TimeOfServICE)---expression service generation time.
Service type (ServICEType)--the type of-expression service comprises exchange of management service, alert service, information service, management, system information etc.
Different business function in certain class service of functional category (CommandType)---expression, for example locating information, SMS notification, GIS inquiry etc.
When carrying out integrated information service in electric power enterprise information monitoring information system, different service systems is different with the needed business datum of service object, and different applied business has different Service Data Units in XML.Different business datum and the Envelope among the XML are arranged side by side, Envelope and concrete independent of service, and different business datums is just relevant with concrete business.Can define different business datum marks (TAG) as required, according to the increase of business, only needing increases the corresponding business tag definitions, can expand the traffic handing capacity of switching plane system easily.
The general frame of safe access device in the power monitoring information system as shown in Figure 3, as shown in Figure 3, safe access device system can be divided into following subsystem: core subsystem, data acquisition interface system, data transmission interface system and operating system, wherein operating system comprises that (SuSE) Linux OS and IPSec VPN support.
IPSec VPN development platform provides the enterprise and the application platform of Virtual Private Network service, and platform provides various management interfaces, secure processing interface, runnable interface.The safe handling assembly that while develops according to the interface standard of system on this platform, we are referred to as security engine SE (Security Engine).IPSec VPN development platform also includes FW (fire compartment wall), PF (packet filtering), AUTH SE such as (authentications) simultaneously, and perfect, comprehensive network insertion service and safety guarantee are provided.
In addition, safe access device is also supported gui management.The function that the gui management device that is adopted can provide configuration operation and state to show to every function of system platform and its support has good stable.The all settings of system can be finished under the graphical interfaces intuitively, and the user can carry out brand-new visualized management and configuration.
★ supports keeper's classification
Gui management person user: adm
GUI auditor user: admview
Situ configuration administrator: sadm
Situ configuration auditor user: sadmview
Wherein situ configuration keeper sadm and interface management person adm can not login simultaneously, and when adm user signed in on the gui management interface, situ configuration keeper can only check configuration with sadmview user, and sadmview can not revise configuration.
★ supports centralized management
Safe access device has the function of the centralized management supported, has dual mode to realize.A kind of mode is by management software in the centralized manager and the agent software communication in the equipment, realizes centralized configuration and operation to a plurality of safe access devices.All be also must set up the tunnel under the situation of dynamic IP addressing at the VPN that sets up the tunnel both sides by centralized manager.Can also realize issuing and exchanging of safety certificate by centralized manager.
Another kind of mode be by the VPN centralized manager set up with a plurality of safe access devices that need management between be connected, realization is to the centralized configuration and the operation of a plurality of safe access devices.VPN centralized manager software available chart is the operating state of the safe access device of reflection in real time, and supports telemanagement.
★ two-node cluster hot backup function
Safe access device can provide the two-node cluster hot backup function, when in running order safe access device breaks down, Status of Backups safety access device will automatically switch to operating state, replace the failure safe access device and will carry out work, to guarantee the normal use of network.Handoff procedure does not need manual operation, need be except that the participation of other system two safe access devices yet.
★ supports the QOS Bandwidth Management
Webmaster is according to the situation of utilizing of Internet resources, and the Internet resources of the LAN network segment of equipment protection are carried out up, downlink transfer control, realizes allotment and management on the macroscopic view.
Safe access device is implemented the current operating state of circular collecting device and is given the power monitoring management platform after operate as normal, thereby assurance power monitoring platform can implement to monitor the present running status of collecting device.
In order to realize the manageability of safe access device, equipment should possess the unified configuration feature of network strategy, security strategy, data acquisition strategy.
The data acquisition standard mainly shows following 7 aspects:
1, gathers the agency
Be deployed in power monitoring relevant information system in collection agency should meet following standard:
1) type of database of the adaptation data server of disposing;
2) do not endanger the stability and the fail safe of the information system relevant with power monitoring;
3) according to the relevant data acquisition strategies in the safe access device, the data content that comes concrete decision to gather;
4) data acquisition strategy decision agent acquisition content;
5) performance impact to institute's connecting system should not surpass 10%.
2, metadata cache
Safe access device should have the buffer memory ability, and its standard is as follows:
1) should possess the storage capacity that the Information Monitoring of at least 24 hours institutes is all measured;
2) data in the buffer memory have the recovery capability after equipment restarts.
3, completeness check
The completeness check standard of institute's image data is as follows:
The data of being gathered must satisfy each other index integrity constrains of level.
4, format conversion
The standard of format conversion is as follows:
Use XML (Extensible Markup Language, RFC1766) technology;
2) adapt to the data type of the data acquisition standard defined of holding power;
3) possesses the ability of numerous types of data being carried out extended description.
5, compression
All image data are all compressed processing after being converted to consolidation form, standard is as follows:
1) has configurable compression efficiency;
2) compressed file format should be compatible mutually with the Digital Signature Algorithm that this equipment is adopted.
6, digital signature
The digital signature standard is as follows:
1) signature algorithm that is adopted is the algorithm of the relevant authorities of house keeper identification;
2) generation of signature key, selection and use pattern meet relative national standards and regulation;
3) signature algorithm should have security infrastructure compatibility mutually now with Electricity Monitoring Commission.
7, transmission
Power monitoring information must adopt the security path transmission that is made of this equipment and back-end data reception server, seals safety and network route request that the dress form meets transmission channel.
The workflow of power monitoring information system as shown in Figure 8.
Step S1, the Agent that is installed in the power information system gathers supervision information, the information after the format, subsidiary CRC check sign indicating number sends to safe access device in real time by local area network (LAN);
Step S2, safe access device is received information, and carries out validity check, and error correction;
Step S3, safe access device is with the metadata cache local hard drive;
Step S4, safe access device format the data that receive simultaneously according to power monitoring systematic unity data format;
Step S5 adopts compression algorithm to compress formatted data;
Step S6 adopts the PKI technology to carry out digital signature;
Step S7 sends to the data after handling the power monitoring information system of supervision center.
In the present embodiment, be applicable to that Utilities Electric Group Co., large regional grid control centre, regional electricity market, popularity company, provincial control centre insert in the relevant information system of power monitoring, its main hardware index is as follows:
CPU:1~2 intel is to strong or AMD Opteron
Internal memory: 1024~2048M
Hard disk: 73.4~146.8G SCSI hard disk
Network interface card: 3 100Mbps Ethernet cards
Power supply: duplicate supply, 1+1 redundancy
Be applicable to that the single electric power enterprise information system relevant with power monitoring inserts, its main hardware index is as follows:
CPU:1~2 an intel P4 or AMD Opteron
Internal memory: 1024M
Hard disk: 73.4SCSI hard disk
Network interface card: 3 100Mbps Ethernet cards
Though the present embodiment statement is power monitoring information system and safe access device wherein; but those skilled in the art can apply it to other field solving data acquisition, transmission requirement, so all relevant expansions of carrying out on the basis of present embodiment of those skilled in the art and use the protection range that all should fall into the application.