核电厂安全级DCS系统信息安全设计研究

Research on Information Security of Nuclear Power Plant Safety DCS System

随着安全级DCS系统在核领域的广泛应用,对该系统的信息安全防护要求也不断提高。本文参考IEC 62645标准,在现有区块链技术的基础上,针对仪控系统可能受到的网络攻击进行分析,提出一种核电厂安全级DCS系统的信息安全防护方案。利用区块链技术的不可篡改、去中心化、节点数据集体维护等特点,实现对系统工程师站的可信身份认证、系统站间的接入认证和访问控制、系统配置文件的防篡改以及环网通信核心数据的保护。从而完善系统传统信息安全防护体系,进一步提升整个系统的信息安全防护能力。

With the wide application of safety DCS in the nuclear field,the requirement of information security protection of the system is increasing.Based on the blockchain technology,this paper analyzes the possible network attacks on the system of the instrument and proposes a security protection measure for the nuclear power plant DCS system by referring to the IEC 62645 standard.According to the character of blockchain technology,such as immutability,decentralization and consensus driven,the trusted identify authentication of engineer station,the security access control among stations of the system,the non-tampering of system configuration files and ring network communication data protection are implemented.As a result,the application of blockchain technology improves the traditional information security protection architecture and further enhances the information security protection capability of the whole system.