基于无线公网VPN的电力监控系统安全接入区研究

Secure Access Area of Power Monitoring System Based on Wireless Public Network VPN

为社会经济发展提供安全、可靠、可持续电力供应是电力企业的重要使命,因此,电力监控系统安全防护要求比普通企业要高得多。随着小型分布式电源的快速发展,需要调度中心电力监控系统监视和控制大量的分布式电源。通过对传统VPN技术的分析,设计了一种低成本的分布式电源数据接入地(县)调度中心电力监控系统的无线数据通道和组网方式,并详细阐述了地(县)调度中心电力监控系统安全接入区的实现方案。组网方式和安全接入区方案以快速和低成本方式解决分布式电源发电数据接入地(县)调度中心电力监控系统,并实现调度端和场站侧无线终端的双向认证、加密认证和访问控制,同时调度中心安全接入区与生产控制大区隔离。

Electric power enterprises bear the important mission of providing a safe,reliable and sustainable power supply for social and economic development,therefore,the security requirements of power monitoring systems are much higher than those of ordinary enterprises. With the rapid development of the small distributed power supply,a centralized power monitoring and control system was needed to monitor and control a large number of distributed power sources. Based on the analysis of traditional VPN technology,a low-cost distributed power supply data access to （at prefecture or county levels） dispatching center was designed for wireless data channel and networking mode of power monitoring and control system,and the implementation scheme of secure access area of （at prefecture or county levels） dispatching centerin power monitoring system was explained in detail. The network mode and the safe access area scheme could solve the problems such as the distributed power generation data access to （at prefecture or county levels）dispatching centerin a fast and low cost way,and realize the two-way authentication,encryption authentication and access control between the dispatching center and the new energy wireless terminal.Meanwhile,the security access zone of the dispatching center was separated from the production control area.