论文部分内容阅读
根据风电场监控通信标准IEC61400-25提出的安全需求,深入分析了风电场监控通信过程的安全性,明确了访问控制和通信安全的重要性。依照电力系统数据和通信安全标准IEC62351-3设计了基于角色的访问控制(RBAC)组件以实现授权和访问控制,采用开放源码Matrix SSL构建传输层安全协议(TLS)通信安全组件以满足数据交换过程的机密性、完整性及身份认证等。最后构建了集成访问控制组件和通信安全组件的代理机制模型,并以其在风电机组控制器中的应用为例阐明安全代理机制的具体实现。该解决方案遵循IEC61400-25标准的信息模型和信息交换模型,紧密结合风电机组嵌入式环境的特点,符合IEC62351标准,满足风电场中监控通信的安全需求。
According to the security requirements proposed by the IEC61400-25 standard for wind farm monitoring and control, the security of the monitoring and control communication process in wind farms is analyzed in depth and the importance of access control and communication security is clarified. Based on Power System Data and Communication Security Standard IEC62351-3, Role-Based Access Control (RBAC) components are designed for authorization and access control, using open source Matrix SSL to build Transport Layer Security Protocol (TLS) communication security components to meet the data exchange process Confidentiality, integrity and identity certification. At last, the agent mechanism model integrating the access control component and the communication security component is constructed, and the concrete application of the security agent mechanism is illustrated with the example of its application in the wind turbine controller. The solution complies with the information model and information exchange model of IEC61400-25, closely meets the characteristics of embedded environment of wind turbine and conforms to the IEC62351 standard to meet the safety requirements of monitoring and controlling communication in wind farms.