Article(id=1236596127915634810, tenantId=1146029695717560320, journalId=1210938733613449225, issueId=1236596124832821317, articleNumber=null, orderNo=null, doi=10.19666/j.rlfd.202409205, pmid=null, cstr=null, oa=null, hot=null, price=null, onlineType=0, articleFormat=0, articleType=null, articleTypeStr=null, receivedDate=1725379200000, receivedDateStr=2024-09-04, revisedDate=null, revisedDateStr=null, acceptedDate=null, acceptedDateStr=null, onlineDate=1772757091739, onlineDateStr=2026-03-06, pubDate=1748102400000, pubDateStr=2025-05-25, doiRegisterDate=null, doiRegisterDateStr=null, onlineIssueDate=1772757091739, onlineIssueDateStr=2026-03-06, onlineJustAcceptDate=null, onlineJustAcceptDateStr=null, onlineFirstDate=null, onlineFirstDateStr=null, sourceXml=null, magXml=null, createTime=1772757091739, creator=13701087609, updateTime=1772757091739, updator=13701087609, issue=Issue{id=1236596124832821317, tenantId=1146029695717560320, journalId=1210938733613449225, year='2025', volume='54', issue='5', pageStart='1', pageEnd='162', issueExtLink='null', onlineDate='null', pubDate='null', beforeIssueId=null, nextIssueId=null, price=null, status=1, issueComplete=0, articleOrder=1, issueType=-1, specialIssue=null, createTime=1772757091004, creator=13701087609, updateTime=1772757664851, updator=13701087609, preIssue=null, nextIssue=null, ext={EN=IssueExt(id=1236598531780309922, tenantId=1146029695717560320, journalId=1210938733613449225, issueId=1236596124832821317, language=EN, specialIssueTitle=, coverIllustrator=null, specialIssueEditor=, specialIssueAbout=), CN=IssueExt(id=1236598531780309923, tenantId=1146029695717560320, journalId=1210938733613449225, issueId=1236596124832821317, language=CN, specialIssueTitle=, coverIllustrator=null, specialIssueEditor=, specialIssueAbout=)}, issueFiles=null}, startPage=156, endPage=162, ext={EN=ArticleExt(id=1236596128238596225, articleId=1236596127915634810, tenantId=1146029695717560320, journalId=1210938733613449225, language=EN, title=Design and application of security reinforcement middleware for interal unidirectional safety isolating device for electric power, columnId=1236596125684265033, journalTitle=Thermal Power Generation, columnName=Power generation technology, runingTitle=null, highlight=null, articleAbstract=

To enhance the cybersecurity protection capabilities of power monitoring systems, a security reinforcement middleware for interal unidirectional safety isolating device for electric power has been designed. This middleware integrates compatibility adaptation, file format correction, encryption authentication, load balancing, and access control functions, addressing the security issues such as business system compatibility, hardware failures, and plaintext communication faced by isolation devices during the upgrading and reinforcement process. It enhances the security control of data transmission channels in power monitoring systems and achieves an “efficient and unobtrusive” and “standardized” security upgrade and reinforcement of the isolation devices. This middleware has been successfully applied to all thermal power, hydropower, and new energy power stations of Huaneng Group, strengthening the cybersecurity boundary protection capabilities of critical information infrastructure in power monitoring and ensuring the information security of power production.

, correspAuthors=null, authorNote=null, correspAuthorsNote=null, copyrightStatement=null, copyrightOwner=null, extLink=null, articleAbsUrl=null, sourceXml=null, magXml=null, pdfUrl=null, pdf=null, pdfFileSize=null, pdfExtLink=null, richHtmlUrl=null, mobilePdfUrl=null, reviewReport=null, pdfFirstPage=null, abstractGraph=null, abstractGraphContent=null, abstractVideo=null, citation=null, cebUrl=null, magXmlContent=null, mapNumber=null, authorCompany=null, fund=null, authors=null, authorsList=Ruirui MA, Qing HE, Guodong YANG, Dapeng WANG, Yi WANG, Baohua DU), CN=ArticleExt(id=1236596129790488790, articleId=1236596127915634810, tenantId=1146029695717560320, journalId=1210938733613449225, language=CN, title=电力专用横向单向隔离装置安全加固中间件设计及应用, columnId=1211002409581679375, journalTitle=热力发电, columnName=发电技术论坛, runingTitle=null, highlight=null, articleAbstract=

为了提高电力监控系统的网络安全防护能力,设计了一种电力专用横向单向隔离装置安全加固中间件。该中间件集成了兼容性适配、文件格式矫正、加密认证、负载均衡及权限控制等功能,在业务系统所在管理信息大区和生产控制大区间构建了一道坚实的安全屏障,解决了隔离装置在升级加固过程中面临的业务系统兼容性、硬件故障及明文通信等安全问题,强化了电力监控系统数据传输通道的安全管控,实现了隔离装置的“高效无感知”和“标准化”安全升级加固。该中间件已成功应用于中国华能集团所有火电、水电和新能源电站,提升了电力监控关键信息基础设施网络安全边界防护能力,保障了电力生产的信息安全。

, correspAuthors=null, authorNote=null, correspAuthorsNote=null, copyrightStatement=null, copyrightOwner=null, extLink=null, articleAbsUrl=null, sourceXml=PA6xTitwqAGldIuihTgJ2Q==, magXml=WIxA8xOEv5IycDVOJRO6UA==, pdfUrl=null, pdf=Cmq2WBh0CPl28WULfuCZTg==, pdfFileSize=1016060, pdfExtLink=null, richHtmlUrl=null, mobilePdfUrl=null, reviewReport=null, pdfFirstPage=null, abstractGraph=Bv53yJTDe85ZEedUsKNmPw==, abstractGraphContent=null, abstractVideo=null, citation=null, cebUrl=null, magXmlContent=4RVo1ByXwu9930zLrslo2g==, mapNumber=null, authorCompany=null, fund=null, authors=

马瑞瑞(1982),女,硕士,高级工程师,主要研究方向为电站信息技术及其应用,

, authorsList=马瑞瑞, 何清, 杨国栋, 王大鹏, 王毅, 杜保华)}, authors=[Author(id=1236610614592860343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=0, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=maruirui@tpri.com.cn, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610614689329342, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610614592860343, language=EN, stringName=Ruirui MA, firstName=Ruirui, middleName=null, lastName=MA, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610614794186950, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610614592860343, language=CN, stringName=马瑞瑞, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio={"content":"

马瑞瑞(1982),女,硕士,高级工程师,主要研究方向为电站信息技术及其应用,

"}, bioImg=null, bioContent=

马瑞瑞(1982),女,硕士,高级工程师,主要研究方向为电站信息技术及其应用,

, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])]), Author(id=1236610614903238862, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=1, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=null, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610615033262294, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610614903238862, language=EN, stringName=Qing HE, firstName=Qing, middleName=null, lastName=HE, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610615121342687, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610614903238862, language=CN, stringName=何清, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])]), Author(id=1236610615230394599, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=2, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=null, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610615331057903, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615230394599, language=EN, stringName=Guodong YANG, firstName=Guodong, middleName=null, lastName=YANG, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610615444304121, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615230394599, language=CN, stringName=杨国栋, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])]), Author(id=1236610615582716163, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=3, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=null, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610615712739595, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615582716163, language=EN, stringName=Dapeng WANG, firstName=Dapeng, middleName=null, lastName=WANG, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610615838568723, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615582716163, language=CN, stringName=王大鹏, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])]), Author(id=1236610615926649113, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=4, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=null, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610616044089631, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615926649113, language=EN, stringName=Yi WANG, firstName=Yi, middleName=null, lastName=WANG, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610616136364327, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610615926649113, language=CN, stringName=王毅, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])]), Author(id=1236610616241221938, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, orderNo=5, firstName=null, middleName=null, lastName=null, nameCn=null, orcid=null, stid=null, country=null, authorPic=null, dead=0, email=null, emailSecond=null, emailThird=null, correspondingAuthor=0, authorType=1, ext={EN=AuthorExt(id=1236610616350273847, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610616241221938, language=EN, stringName=Baohua DU, firstName=Baohua, middleName=null, lastName=DU, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null), CN=AuthorExt(id=1236610616476102976, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, authorId=1236610616241221938, language=CN, stringName=杜保华, firstName=null, middleName=null, lastName=null, prefix=null, suffix=null, authorComment=null, nameInitials=null, affiliation=null, department=null, xref=null, address=西安热工研究院有限公司,陕西 西安 710054, bio=null, bioImg=null, bioContent=null, aboutCorrespAuthor=null)}, companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])])], keywords=[Keyword(id=1236610616639680849, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, orderNo=1, keyword=isolation device), Keyword(id=1236610616748732763, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, orderNo=2, keyword=security reinforcement), Keyword(id=1236610616882950500, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, orderNo=3, keyword=middleware), Keyword(id=1236610617008779628, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, orderNo=4, keyword=power monitoring system), Keyword(id=1236610617134608757, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, orderNo=1, keyword=隔离装置), Keyword(id=1236610617222689150, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, orderNo=2, keyword=安全加固), Keyword(id=1236610617327546754, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, orderNo=3, keyword=中间件), Keyword(id=1236610617461764489, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, orderNo=4, keyword=电力监控系统)], refs=[Reference(id=1236610619881878026, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=12, pageStart=186, pageEnd=189, url=null, language=null, rfNumber=[1], rfOrder=0, authorNames=杨鹏, journalName=电工技术, refType=null, unstructuredReference=杨鹏. 大型发电厂电力监控系统安全防护方案设计及工程实践[J]. 电工技术, 2023(12): 186-189., articleTitle=大型发电厂电力监控系统安全防护方案设计及工程实践, refAbstract=null), Reference(id=1236610619986735633, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=12, pageStart=186, pageEnd=189, url=null, language=null, rfNumber=[1], rfOrder=1, authorNames=YANG Peng, journalName=Electric Engineering, refType=null, unstructuredReference=YANG Peng. Design and engineering practice of security protection scheme for large plant power monitoring system[J]. Electric Engineering, 2023(12): 186-189., articleTitle=Design and engineering practice of security protection scheme for large plant power monitoring system, refAbstract=null), Reference(id=1236610620095787545, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2020, volume=7, issue=3, pageStart=6, pageEnd=22, url=null, language=null, rfNumber=[2], rfOrder=2, authorNames=杨至元, 张仕鹏, 孙浩, journalName=南方能源建设, refType=null, unstructuredReference=杨至元, 张仕鹏, 孙浩. 电力系统信息物理网络安全综合分析与风险研究[J]. 南方能源建设, 2020, 7(3): 6-22., articleTitle=电力系统信息物理网络安全综合分析与风险研究, refAbstract=null), Reference(id=1236610620200645152, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2020, volume=7, issue=3, pageStart=6, pageEnd=22, url=null, language=null, rfNumber=[2], rfOrder=3, authorNames=YANG Zhiyuan, ZHANG Shipeng, SUN Hao, journalName=Southern Energy Construction, refType=null, unstructuredReference=YANG Zhiyuan, ZHANG Shipeng, SUN Hao. Integrated cyber-physical contingency analysis and risk estimates[J]. Southern Energy Construction, 2020, 7(3): 6-22., articleTitle=Integrated cyber-physical contingency analysis and risk estimates, refAbstract=null), Reference(id=1236610620347445802, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2019, volume=43, issue=2, pageStart=162, pageEnd=167, url=null, language=null, rfNumber=[3], rfOrder=4, authorNames=曹翔, 张阳, 宋林川, journalName=电力系统自动化, refType=null, unstructuredReference=曹翔, 张阳, 宋林川, 等. 基于深度报文检测和安全增强的正向隔离装置设计及实现[J]. 电力系统自动化, 2019, 43(2): 162-167., articleTitle=基于深度报文检测和安全增强的正向隔离装置设计及实现, refAbstract=null), Reference(id=1236610620464886322, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2019, volume=43, issue=2, pageStart=162, pageEnd=167, url=null, language=null, rfNumber=[3], rfOrder=5, authorNames=CAO Xiang, ZHANG Yang, SONG Linchuan, journalName=Automation of Electric Power Systems, refType=null, unstructuredReference=CAO Xiang, ZHANG Yang, SONG Linchuan, et al. Design and implementation of a forward isolation device based on deep packet inspection and security enhancement[J]. Automation of Electric Power Systems, 2019, 43(2): 162-167., articleTitle=Design and implementation of a forward isolation device based on deep packet inspection and security enhancement, refAbstract=null), Reference(id=1236610620586521142, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2006, volume=null, issue=6, pageStart=31, pageEnd=33, url=null, language=null, rfNumber=[4], rfOrder=6, authorNames=申永辉, journalName=湖南电力, refType=null, unstructuredReference=申永辉. 电力专用安全隔离装置的原理和应用[J]. 湖南电力, 2006(6): 31-33., articleTitle=电力专用安全隔离装置的原理和应用, refAbstract=null), Reference(id=1236610620695573052, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2006, volume=null, issue=6, pageStart=31, pageEnd=33, url=null, language=null, rfNumber=[4], rfOrder=7, authorNames=SHEN Yonghui, journalName=Hunan Electric Power, refType=null, unstructuredReference=SHEN Yonghui. Principle and application of power specific safety isolation devices[J]. Hunan Electric Power, 2006(6): 31-33., articleTitle=Principle and application of power specific safety isolation devices, refAbstract=null), Reference(id=1236610620779459136, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2018, volume=21, issue=2, pageStart=61, pageEnd=66, url=null, language=null, rfNumber=[5], rfOrder=8, authorNames=郭仁超, 徐玉韬, journalName=电力大数据, refType=null, unstructuredReference=郭仁超, 徐玉韬. 内外网数据安全交换技术在电网企业的应用研究[J]. 电力大数据, 2018, 21(2): 61-66., articleTitle=内外网数据安全交换技术在电网企业的应用研究, refAbstract=null), Reference(id=1236610620901093958, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2018, volume=21, issue=2, pageStart=61, pageEnd=66, url=null, language=null, rfNumber=[5], rfOrder=9, authorNames=GUO Renchao, XU Yutao, journalName=Power Big Data, refType=null, unstructuredReference=GUO Renchao, XU Yutao. Research on the application of internal and external network data security exchange technology in power grid enterprises[J]. Power Big Data, 2018, 21(2): 61-66., articleTitle=Research on the application of internal and external network data security exchange technology in power grid enterprises, refAbstract=null), Reference(id=1236610620989174347, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2018, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[6], rfOrder=10, authorNames=null, journalName=null, refType=null, unstructuredReference=可再生能源发电站电力监控系统网络安全防护技术规范[S]. 北京: 中国标准出版社, 2018: 1., articleTitle=null, refAbstract=null), Reference(id=1236610621102420560, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2018, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[6], rfOrder=11, authorNames=null, journalName=null, refType=null, unstructuredReference=Technical specification for cyber security protection of electric power system supervision and control in renewable energy power station[S]. Beijing: China Standard Press, 2018: 1., articleTitle=null, refAbstract=null), Reference(id=1236610621203083860, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2015, volume=null, issue=1, pageStart=26, pageEnd=30, url=null, language=null, rfNumber=[7], rfOrder=12, authorNames=杜鹏, 陶洪铸, 高保成, journalName=电力系统自动化, refType=null, unstructuredReference=杜鹏, 陶洪铸, 高保成, 等. 面向多应用的通用数据采集技术方案[J]. 电力系统自动化, 2015(1): 26-30., articleTitle=面向多应用的通用数据采集技术方案, refAbstract=null), Reference(id=1236610621278581339, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2015, volume=null, issue=1, pageStart=26, pageEnd=30, url=null, language=null, rfNumber=[7], rfOrder=13, authorNames=DU Peng, TAO Hongzhu, GAO Baocheng, journalName=Automation of Electric Power Systems, refType=null, unstructuredReference=DU Peng, TAO Hongzhu, GAO Baocheng, et al. A universal data collection technology solution for multiple applications[J]. Automation of Electric Power Systems, 2015(1): 26-30., articleTitle=A universal data collection technology solution for multiple applications, refAbstract=null), Reference(id=1236610621358273118, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2006, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[8], rfOrder=14, authorNames=李丽芬, 程晓荣, 吴克河, journalName=计算机网络体系结构, refType=null, unstructuredReference=李丽芬, 程晓荣, 吴克河. 计算机网络体系结构[M]. 北京: 中国电力出版社, 2006: 1., articleTitle=null, refAbstract=null), Reference(id=1236610621467325032, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2006, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[8], rfOrder=15, authorNames=LI Lifen, CHENG Xiaorong, WU Kehe, journalName=Computer network architecture, refType=null, unstructuredReference=LI Lifen, CHENG Xiaorong, WU Kehe. Computer network architecture[M]. Beijing: China Electric Power Press, 2006: 1., articleTitle=null, refAbstract=null), Reference(id=1236610621567988334, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2022, volume=23, issue=6, pageStart=161, pageEnd=164, url=null, language=null, rfNumber=[9], rfOrder=16, authorNames=曹井万, journalName=信息记录材料, refType=null, unstructuredReference=曹井万. 数据加密和单向网闸技术在流程行业的应用研究[J]. 信息记录材料, 2022, 23(6): 161-164., articleTitle=数据加密和单向网闸技术在流程行业的应用研究, refAbstract=null), Reference(id=1236610621681234545, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2022, volume=23, issue=6, pageStart=161, pageEnd=164, url=null, language=null, rfNumber=[9], rfOrder=17, authorNames=CAO Jingwan, journalName=Information Recording Materials, refType=null, unstructuredReference=CAO Jingwan. Research on the application of data encryption and unidirectional gateway technology in the process industry[J]. Information Recording Materials, 2022, 23(6): 161-164., articleTitle=Research on the application of data encryption and unidirectional gateway technology in the process industry, refAbstract=null), Reference(id=1236610621807063673, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=5, pageStart=80, pageEnd=81, url=null, language=null, rfNumber=[10], rfOrder=18, authorNames=陈志军, 洪莎莎, journalName=数字通信世界, refType=null, unstructuredReference=陈志军, 洪莎莎. 跨网络信息安全交换平台建设方案研究[J]. 数字通信世界, 2021(5): 80-81., articleTitle=跨网络信息安全交换平台建设方案研究, refAbstract=null), Reference(id=1236610621991613051, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=5, pageStart=80, pageEnd=81, url=null, language=null, rfNumber=[10], rfOrder=19, authorNames=CHEN Zhijun, HONG Shasha, journalName=Digital Communication World, refType=null, unstructuredReference=CHEN Zhijun, HONG Shasha. Research on the construction plan of cross network information security exchange platform[J]. Digital Communication World, 2021(5): 80-81., articleTitle=Research on the construction plan of cross network information security exchange platform, refAbstract=null), Reference(id=1236610622100664962, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[11], rfOrder=20, authorNames=程裕博, journalName=null, refType=null, unstructuredReference=程裕博. 基于网络多路径和数据压缩的IPFS文件传输性能优化研究[D]. 重庆: 重庆理工大学, 2024: 1., articleTitle=基于网络多路径和数据压缩的IPFS文件传输性能优化研究, refAbstract=null), Reference(id=1236610622247465611, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[11], rfOrder=21, authorNames=CHENG Yubo, journalName=null, refType=null, unstructuredReference=CHENG Yubo. Research on IPFS file transfer performance optimization based on network multipass and data compression[D]. Chongqing: Chongqing University of Technology, 2024: 1., articleTitle=Research on IPFS file transfer performance optimization based on network multipass and data compression, refAbstract=null), Reference(id=1236610622335545999, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[12], rfOrder=22, authorNames=吴涛, journalName=null, refType=null, unstructuredReference=吴涛. 基于LZ4算法的无损压缩硬件设计与WIFI传输[D]. 南京: 东南大学, 2021: 1., articleTitle=基于LZ4算法的无损压缩硬件设计与WIFI传输, refAbstract=null), Reference(id=1236610622406849171, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[12], rfOrder=23, authorNames=WU Tao, journalName=null, refType=null, unstructuredReference=WU Tao. Hardware design of lossless compression based on LZ4 algorithm and WIFI transmission[D]. Nanjing: Southeast University, 2021: 1., articleTitle=Hardware design of lossless compression based on LZ4 algorithm and WIFI transmission, refAbstract=null), Reference(id=1236610622490735257, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[13], rfOrder=24, authorNames=徐雪强, journalName=null, refType=null, unstructuredReference=徐雪强. 基于自适应压缩算法的远程数据采集系统设计与应用[D]. 哈尔滨: 黑龙江大学, 2023: 1., articleTitle=基于自适应压缩算法的远程数据采集系统设计与应用, refAbstract=null), Reference(id=1236610622612370078, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[13], rfOrder=25, authorNames=XU Xueqiang, journalName=null, refType=null, unstructuredReference=XU Xueqiang. Design and application of remote data acquisition system based on adaptive compression algorithm[D]. Harbin: Heilongjiang University, 2023: 1., articleTitle=Design and application of remote data acquisition system based on adaptive compression algorithm, refAbstract=null), Reference(id=1236610622738199204, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[14], rfOrder=26, authorNames=王炳耀, journalName=null, refType=null, unstructuredReference=王炳耀. Zstd压缩算法的硬件设计与验证[D]. 西安: 西安电子科技大学, 2023: 1., articleTitle=Zstd压缩算法的硬件设计与验证, refAbstract=null), Reference(id=1236610622830473895, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2023, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[14], rfOrder=27, authorNames=WANG Bingyao, journalName=null, refType=null, unstructuredReference=WANG Bingyao. Hardware design and verification of Zstd compression algorithm[D]. Xi’an: Xidian University, 2023: 1., articleTitle=Hardware design and verification of Zstd compression algorithm, refAbstract=null), Reference(id=1236610622943720107, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=45, issue=7, pageStart=2066, pageEnd=2073, url=null, language=null, rfNumber=[15], rfOrder=28, authorNames=宋永立, 孙若尘, 贾娟, journalName=计算机工程与设计, refType=null, unstructuredReference=宋永立, 孙若尘, 贾娟, 等. 基于国密算法的CoAP安全协议研究与实现[J]. 计算机工程与设计, 2024, 45(7): 2066-2073., articleTitle=基于国密算法的CoAP安全协议研究与实现, refAbstract=null), Reference(id=1236610623031800495, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=45, issue=7, pageStart=2066, pageEnd=2073, url=null, language=null, rfNumber=[15], rfOrder=29, authorNames=SONG Yongli, SUN Ruochen, JIA Juan, journalName=Computer Engineering and Design, refType=null, unstructuredReference=SONG Yongli, SUN Ruochen, JIA Juan, et al. Research and implementation of CoAP security protocol based on domestic cryptographic algorithms[J]. Computer Engineering and Design, 2024, 45(7): 2066-2073., articleTitle=Research and implementation of CoAP security protocol based on domestic cryptographic algorithms, refAbstract=null), Reference(id=1236610623111492275, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=15, issue=2, pageStart=121, pageEnd=135, url=null, language=null, rfNumber=[16], rfOrder=30, authorNames=ABED S, JAFFAL R, MOHD B J, journalName=IET Circuits, Devices & Systems, refType=null, unstructuredReference=ABED S, JAFFAL R, MOHD B J, et al. Performance evaluation of the SM4 cipher based on field-programmable gate array implementation[J]. IET Circuits, Devices & Systems, 2021, 15(2): 121-135., articleTitle=Performance evaluation of the SM4 cipher based on field-programmable gate array implementation, refAbstract=null), Reference(id=1236610623220544181, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=null, volume=null, issue=null, pageStart=null, pageEnd=null, url=null, language=null, rfNumber=[17], rfOrder=31, authorNames=陈少立, 何清, 王奕飞, journalName=null, refType=null, unstructuredReference=陈少立, 何清, 王奕飞, 等. 一种通过反向网闸同步非E文件的方法: CN202111299310.4[P]. 2024-02-23 [2024-05-16]., articleTitle=一种通过反向网闸同步非E文件的方法, refAbstract=null), Reference(id=1236610623354761913, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=null, volume=null, issue=null, pageStart=null, pageEnd=null, url=null, language=null, rfNumber=[17], rfOrder=32, authorNames=CHEN Shaoli, HE Qing, WANG Yifei, journalName=null, refType=null, unstructuredReference=CHEN Shaoli, HE Qing, WANG Yifei, et al. A method of synchronizing non E files through reverse gateway: CN202111299310.4[P]. 2024-02-23[2024-05-16]., articleTitle=A method of synchronizing non E files through reverse gateway, refAbstract=null), Reference(id=1236610623497368256, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=41, issue=3, pageStart=158, pageEnd=161, url=null, language=null, rfNumber=[18], rfOrder=33, authorNames=罗长洲, 马梦宇, 李萌, journalName=计算机仿真, refType=null, unstructuredReference=罗长洲, 马梦宇, 李萌, 等. CRC校验码软件生成技术原理分析[J]. 计算机仿真, 2024, 41(3): 158-161., articleTitle=CRC校验码软件生成技术原理分析, refAbstract=null), Reference(id=1236610623602225860, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2024, volume=41, issue=3, pageStart=158, pageEnd=161, url=null, language=null, rfNumber=[18], rfOrder=34, authorNames=LUO Changzhou, MA Mengyu, LI Meng, journalName=Computer Simulation, refType=null, unstructuredReference=LUO Changzhou, MA Mengyu, LI Meng, et al. Principle Analysis of CRC checksum software generation system[J]. Computer Simulation, 2024, 41(3): 158-161., articleTitle=Principle Analysis of CRC checksum software generation system, refAbstract=null), Reference(id=1236610623740637899, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=2, pageStart=62, pageEnd=64, url=null, language=null, rfNumber=[19], rfOrder=35, authorNames=任晨, 刘立, 陈鹏, journalName=信息化建设, refType=null, unstructuredReference=任晨, 刘立, 陈鹏, 等. 一种基于隔离网闸的大文件高效传输方案[J]. 信息化建设, 2021(2): 62-64., articleTitle=一种基于隔离网闸的大文件高效传输方案, refAbstract=null), Reference(id=1236610623841301199, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2021, volume=null, issue=2, pageStart=62, pageEnd=64, url=null, language=null, rfNumber=[19], rfOrder=36, authorNames=REN Chen, LIU Li, CHEN Peng, journalName=Informatization Construction, refType=null, unstructuredReference=REN Chen, LIU Li, CHEN Peng, et al. An efficient transmission scheme for large files based on isolation network gates[J]. Informatization Construction, 2021(2): 62-64., articleTitle=An efficient transmission scheme for large files based on isolation network gates, refAbstract=null), Reference(id=1236610623937770197, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2016, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[20], rfOrder=37, authorNames=白燕, journalName=null, refType=null, unstructuredReference=白燕. 基于网闸的双机热备系统的设计与实现[D]. 北京: 北京理工大学, 2016: 1., articleTitle=基于网闸的双机热备系统的设计与实现, refAbstract=null), Reference(id=1236610624042627801, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2016, volume=null, issue=null, pageStart=1, pageEnd=null, url=null, language=null, rfNumber=[20], rfOrder=38, authorNames=BAI Yan, journalName=null, refType=null, unstructuredReference=BAI Yan. Design and implementation of a dual machine hot backup system based on network gates[D]. Beijing: Beijing Institute of Technology, 2016: 1., articleTitle=Design and implementation of a dual machine hot backup system based on network gates, refAbstract=null), Reference(id=1236610624160068316, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2017, volume=34, issue=4, pageStart=135, pageEnd=141, url=null, language=null, rfNumber=[21], rfOrder=39, authorNames=杨越, 王若冰, 刘瑞, journalName=计算机应用与软件, refType=null, unstructuredReference=杨越, 王若冰, 刘瑞, 等. 基于多传输通道的单向传输技术研究[J]. 计算机应用与软件, 2017, 34(4): 135-141., articleTitle=基于多传输通道的单向传输技术研究, refAbstract=null), Reference(id=1236610624277508832, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, doi=null, pmid=null, pmcid=null, year=2017, volume=34, issue=4, pageStart=135, pageEnd=141, url=null, language=null, rfNumber=[21], rfOrder=40, authorNames=YANG Yue, WANG Ruobing, LIU Rui, journalName=Computer Application and Software, refType=null, unstructuredReference=YANG Yue, WANG Ruobing, LIU Rui, et al. Research on unidirectional transmission technology based on multiple transmission channels[J]. Computer Application and Software, 2017, 34(4): 135-141., articleTitle=Research on unidirectional transmission technology based on multiple transmission channels, refAbstract=null)], funds=[Fund(id=1236610619303064050, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, awardId=HNKJ24-H28; HNKJ24-H57, language=EN, fundingSource=Science and Technology Project of China Huaneng Group Co., Ltd.(HNKJ24-H28; HNKJ24-H57), fundOrder=null, country=null), Fund(id=1236610619420504565, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, awardId=HNKJ24-H28; HNKJ24-H57, language=CN, fundingSource=中国华能集团有限公司总部科技项目(HNKJ24-H28; HNKJ24-H57), fundOrder=null, country=null), Fund(id=1236610619525362170, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, awardId=2024GX-YBXM-156, language=EN, fundingSource=Shaanxi Provincial Science and Technology Plan Project(2024GX-YBXM-156), fundOrder=null, country=null), Fund(id=1236610619621831171, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, awardId=2024GX-YBXM-156, language=CN, fundingSource=陕西省科技计划项目(2024GX-YBXM-156), fundOrder=null, country=null)], companyList=[AuthorCompany(id=1236610614475419819, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, xref=null, ext=[AuthorCompanyExt(id=1236610614483808429, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=EN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China), AuthorCompanyExt(id=1236610614496391343, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, companyId=1236610614475419819, language=CN, country=null, province=null, city=null, postcode=null, companyName=null, departmentName=null, remark=西安热工研究院有限公司,陕西 西安 710054)])], figs=[ArticleFig(id=1236610617700839832, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Fig.1, caption=Software architecture diagram of isolation device security reinforcement middleware, figureFileSmall=9rH3rlhz6YLtjrWxvqBU1g==, figureFileBig=hfXn4UYbDwpu9UaEXBHCQA==, tableContent=null), ArticleFig(id=1236610617797308826, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=图1, caption=安全加固中间件软件架构, figureFileSmall=9rH3rlhz6YLtjrWxvqBU1g==, figureFileBig=hfXn4UYbDwpu9UaEXBHCQA==, tableContent=null), ArticleFig(id=1236610617897972131, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Fig.2, caption=Logical diagram for sending and returning data through forward isolation device, figureFileSmall=Z0z0Vgi8BlGvTvy/K29ZQA==, figureFileBig=hb53odVnPJwzZl3tdxYNPg==, tableContent=null), ArticleFig(id=1236610617998635432, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=图2, caption=通过正向隔离装置发送数据和返回数据逻辑, figureFileSmall=Z0z0Vgi8BlGvTvy/K29ZQA==, figureFileBig=hb53odVnPJwzZl3tdxYNPg==, tableContent=null), ArticleFig(id=1236610618128658864, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Fig.3, caption=Isolation device multi-channel redundancy and load balancing software and hardware topology, figureFileSmall=38gNm6v8vQLWMmUgccxRIA==, figureFileBig=9M1rL++Xpalm2xPJWkyEAQ==, tableContent=null), ArticleFig(id=1236610618430648766, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=图3, caption=隔离装置多路冗余和负载均衡软硬件拓扑, figureFileSmall=38gNm6v8vQLWMmUgccxRIA==, figureFileBig=9M1rL++Xpalm2xPJWkyEAQ==, tableContent=null), ArticleFig(id=1236610618531312071, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Fig.4, caption=Deployment method of forward isolation device security reinforcement middleware, figureFileSmall=A770rGvvWCVLMrZLSctoog==, figureFileBig=UjdmC2ehC2/Ij+7rVFiZ6g==, tableContent=null), ArticleFig(id=1236610618631975375, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=图4, caption=正向隔离装置安全加固中间件部署方式, figureFileSmall=A770rGvvWCVLMrZLSctoog==, figureFileBig=UjdmC2ehC2/Ij+7rVFiZ6g==, tableContent=null), ArticleFig(id=1236610618728444371, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Fig.5, caption=Deployment method of backward isolation device security reinforcement middleware, figureFileSmall=quGkdy+lNsoafMKri9L+jA==, figureFileBig=tewJVFsV6rAWceLJ0kz62w==, tableContent=null), ArticleFig(id=1236610618841690582, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=图5, caption=反向隔离装置安全加固中间件部署方式, figureFileSmall=quGkdy+lNsoafMKri9L+jA==, figureFileBig=tewJVFsV6rAWceLJ0kz62w==, tableContent=null), ArticleFig(id=1236610618917188062, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=EN, label=Tab.1, caption=

Single-bit error code configuration conversion table

, figureFileSmall=null, figureFileBig=null, tableContent=
业务系统服务端发送响应报文加固中间件服务端转换加固中间件
客户端转换
业务系统客户端
接收响应报文
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x000x000x00,0x00,0x00,0x00,0x00,0x00,0x00,0x000x00,0x00,0x00,
0x00,0x00,0x00,
0x00,0x00
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
xff,0x00,0x00,0x00,0x00,0x00,0x00,0x000xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
0xff,0xff,0x00,0x00,0x00,0x00,0x00,0x000xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
......0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
), ArticleFig(id=1236610619043017186, tenantId=1146029695717560320, journalId=1210938733613449225, articleId=1236596127915634810, language=CN, label=表1, caption=

单比特错误码配置转换

, figureFileSmall=null, figureFileBig=null, tableContent=
业务系统服务端发送响应报文加固中间件服务端转换加固中间件
客户端转换
业务系统客户端
接收响应报文
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x000x000x00,0x00,0x00,0x00,0x00,0x00,0x00,0x000x00,0x00,0x00,
0x00,0x00,0x00,
0x00,0x00
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
xff,0x00,0x00,0x00,0x00,0x00,0x00,0x000xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
0xff,0xff,0x00,0x00,0x00,0x00,0x00,0x000xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
......0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff
)], attaches=null, journal=Journal(id=1210938006006558725, delFlag=0, nameCn=热力发电, nameEn=Thermal Power Generation, nameHistory1=null, nameHistory2=null, issn=1002-3364, eissn=null, cn=61-1111/TM, coden=null, periodic=0, language=CN, oaType=null, ccby=null, superviseOffice=null, ownerOffice=null, pubOffice=null, editorOffice=null, officeType=null, aims=null, clcCode=null, officeProv=null, officeCity=null, officeAddr=null, officeZip=null, officeEmail=null, officePhone=null, editDirector=null, officeDirector=null, officeDirectorPhone=null, officeStaffNum=null, officeEmpNum=null, coverPicUrl=YWgAUXbKXZzTw3c+kJbAIA==, journalPrice=null, startedYear=null, abbrevIsoEn=Thermal Power Generation, journalRemark=null, publicationField=null, createdTime=1766639718774, updatedTime=1766640759031, createdBy=18614031015, updatedBy=13701087609, firstLetterCn=T, firstLetterEn=T, subjectCode=Engineering, subjectName=null, subjectCodeEn=Engineering, subjectNameEn=null, picCn=YWgAUXbKXZzTw3c+kJbAIA==, picEn=jfJjUlYAGfUZwuOMQZ6AHQ==, jcr=null, cjcr=null, exts=[JournalExt(id=1210942369256575009, language=CN, name=热力发电, nameHistory1=null, nameHistory2=null, managedBy=, sponsoredBy=, publishedBy=, editorOffice=, officeProv=null, officeCity=null, officeAddr=, officeZip=, editDirector=, officeDirector=null, officePhone=null, coverPicUrl=null, journalRemark=, submitArticleUrl=null, websiteUrl=, createdTime=1766640759052, updatedTime=1766640759052, createdBy=13701087609, updatedBy=13701087609, submissionGuidelinesUrl=, submissionAuthorUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=1, submissionEditorUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=3, submissionReviewUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=2, submissionCeEditorUrl=, submissionAeEditorUrl=, option={"copyright":""}), JournalExt(id=1210942369315295266, language=EN, name=Thermal Power Generation, nameHistory1=null, nameHistory2=null, managedBy=, sponsoredBy=, publishedBy=, editorOffice=, officeProv=null, officeCity=null, officeAddr=, officeZip=, editDirector=, officeDirector=null, officePhone=null, coverPicUrl=null, journalRemark=, submitArticleUrl=null, websiteUrl=, createdTime=1766640759066, updatedTime=1766640759066, createdBy=13701087609, updatedBy=13701087609, submissionGuidelinesUrl=, submissionAuthorUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=1, submissionEditorUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=3, submissionReviewUrl=https://rlfd.chinajournal.net.cn/index.aspx?t=2, submissionCeEditorUrl=, submissionAeEditorUrl=, option={"copyright":""})], databaseList=null, tenantJournalId=1210938733613449225, websiteList=[Website(id=1210941118787744741, webName=null, webTitle=null, webDomain=null, webCopyrigh=null, webIpcNo=null, seoTitle=null, seoKeywords=null, seoDescription=null, tenantJournalId=null, journalId=1210938733613449225, journalNameCn=null, journalNameEn=null, grayFlag=null, tenantId=1146029695717560320, platformId=null, journalGroupId=null, journalGroupNameCn=null, journalGroupNameEn=null, type=1, domain=https://castjournals.cast.org.cn/joweb/rlfd/CN, language=CN, createTime=1766640460918, createBy=18614031015, updateTime=1766640511525, updateBy=18614031015, name=热力发电-中文, tplId=1146099689490845704, title=热力发电, delFlag=0, indexPage=/home, props=[WebsiteProps(id=1210944690380214659, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=articleTextType, value=kx, createTime=1766641312451, updateTime=1766641312451, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690359243136, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=banner, value=null, createTime=1766641312446, updateTime=1766641312446, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690401186182, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=grayFlag, value=0, createTime=1766641312456, updateTime=1766641312456, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690346660223, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=logo, value=https://castjournals.cast.org.cn/joweb/rlfd/CN/file/pic?fileId=ToFA0Lu4b/CNocENDvNjHA==, createTime=1766641312443, updateTime=1766641312443, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690409574792, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=minRunFlag, value=0, createTime=1766641312458, updateTime=1766641312458, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690371826050, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=picServerUrl, value=https://castjournals.cast.org.cn/joweb/rlfd/CN/file/pic, createTime=1766641312449, updateTime=1766641312449, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690405380487, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=silenceFlag, value=0, createTime=1766641312457, updateTime=1766641312457, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690367631745, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=staticResourcePath, value=https://castjournals.cast.org.cn/joweb/cast_kjdb_cn_619/, createTime=1766641312448, updateTime=1766641312448, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690388603268, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=themeColor, value=null, createTime=1766641312453, updateTime=1766641312453, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944690392797573, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118787744741, code=themeStyle, value=null, createTime=1766641312454, updateTime=1766641312454, creator=18614031015, updator=18614031015)]), Website(id=1210941118926156777, webName=null, webTitle=null, webDomain=null, webCopyrigh=null, webIpcNo=null, seoTitle=null, seoKeywords=null, seoDescription=null, tenantJournalId=null, journalId=1210938733613449225, journalNameCn=null, journalNameEn=null, grayFlag=null, tenantId=1146029695717560320, platformId=null, journalGroupId=null, journalGroupNameCn=null, journalGroupNameEn=null, type=1, domain=https://castjournals.cast.org.cn/joweb/rlfd/EN, language=EN, createTime=1766640460950, createBy=18614031015, updateTime=1766640598724, updateBy=18614031015, name=热力发电-英文, tplId=1146101810881728533, title=Thermal Power Generation, delFlag=0, indexPage=/home, props=[WebsiteProps(id=1210944709317489283, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=articleTextType, value=kx, createTime=1766641316966, updateTime=1766641316966, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709296517760, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=banner, value=null, createTime=1766641316961, updateTime=1766641316961, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709334266502, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=grayFlag, value=0, createTime=1766641316970, updateTime=1766641316970, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709288129151, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=logo, value=https://castjournals.cast.org.cn/joweb/rlfd/CN/file/pic?fileId=ToFA0Lu4b/CNocENDvNjHA==, createTime=1766641316959, updateTime=1766641316959, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709346849416, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=minRunFlag, value=0, createTime=1766641316973, updateTime=1766641316973, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709309100674, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=picServerUrl, value=https://castjournals.cast.org.cn/joweb/rlfd/EN/file/pic, createTime=1766641316964, updateTime=1766641316964, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709338460807, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=silenceFlag, value=0, createTime=1766641316971, updateTime=1766641316971, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709300712065, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=staticResourcePath, value=https://castjournals.cast.org.cn/joweb/cast_kjdb_en_623/, createTime=1766641316962, updateTime=1766641316962, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709321683588, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=themeColor, value=null, createTime=1766641316967, updateTime=1766641316967, creator=18614031015, updator=18614031015), WebsiteProps(id=1210944709330072197, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1210941118926156777, code=themeStyle, value=null, createTime=1766641316969, updateTime=1766641316969, creator=18614031015, updator=18614031015)])], journalTitle=热力发电, weixinUrl=null, journalUrl=null, iacademicId=null, status=1, seqNo=null, journalTitleEn=Thermal Power Generation, journalPhotoCn=YWgAUXbKXZzTw3c+kJbAIA==, journalPhotoEn=jfJjUlYAGfUZwuOMQZ6AHQ==, journalFirstLetter=T, journalRecommend=null, journalNew=null, journalCollection=null, jcrJf=null, cjcrJf=null, jcrJfStr=null, cjcrJfStr=null, submissionFirstDecision=null, sciSubjectClassification=null, casSubjectClassification=null, citeScore=null, totalCitationFrequency=null, icpCode=null, psCode=null, advertisingLicenseCode=null, copyrightInformation=null, country=null, option=, provinceCode=null, provinceName=null, collectFlag=false), detailUrlCn=https://castjournals.cast.org.cn/joweb/rlfd/CN/10.19666/j.rlfd.202409205, detailUrlEn=https://castjournals.cast.org.cn/joweb/rlfd/EN/10.19666/j.rlfd.202409205, pdfUrlCn=https://castjournals.cast.org.cn/joweb/rlfd/CN/PDF/10.19666/j.rlfd.202409205, pdfUrlEn=https://castjournals.cast.org.cn/joweb/rlfd/EN/PDF/10.19666/j.rlfd.202409205, aliStartDate=null, aliEndDate=null, collectionFlag=false, citedCount=null, citedUrl=null, reference=null)
收藏切换
电力专用横向单向隔离装置安全加固中间件设计及应用
收藏切换
PDF下载
马瑞瑞 , 何清 , 杨国栋 , 王大鹏 , 王毅 , 杜保华
热力发电 | 发电技术论坛 2025,54(5): 156-162
收起
收藏切换
热力发电 | 发电技术论坛 2025, 54(5): 156-162
电力专用横向单向隔离装置安全加固中间件设计及应用
全屏
马瑞瑞 , 何清, 杨国栋, 王大鹏, 王毅, 杜保华
作者信息
  • 西安热工研究院有限公司,陕西 西安 710054
  • 马瑞瑞(1982),女,硕士,高级工程师,主要研究方向为电站信息技术及其应用,

Design and application of security reinforcement middleware for interal unidirectional safety isolating device for electric power
Ruirui MA , Qing HE, Guodong YANG, Dapeng WANG, Yi WANG, Baohua DU
Affiliations
  • Xi’an Thermal Power Research Institute Co, Ltd, Xi’an 710054, China
出版时间: 2025-05-25 doi: 10.19666/j.rlfd.202409205
文章导航
收藏切换

为了提高电力监控系统的网络安全防护能力,设计了一种电力专用横向单向隔离装置安全加固中间件。该中间件集成了兼容性适配、文件格式矫正、加密认证、负载均衡及权限控制等功能,在业务系统所在管理信息大区和生产控制大区间构建了一道坚实的安全屏障,解决了隔离装置在升级加固过程中面临的业务系统兼容性、硬件故障及明文通信等安全问题,强化了电力监控系统数据传输通道的安全管控,实现了隔离装置的“高效无感知”和“标准化”安全升级加固。该中间件已成功应用于中国华能集团所有火电、水电和新能源电站,提升了电力监控关键信息基础设施网络安全边界防护能力,保障了电力生产的信息安全。

隔离装置  /  安全加固  /  中间件  /  电力监控系统

To enhance the cybersecurity protection capabilities of power monitoring systems, a security reinforcement middleware for interal unidirectional safety isolating device for electric power has been designed. This middleware integrates compatibility adaptation, file format correction, encryption authentication, load balancing, and access control functions, addressing the security issues such as business system compatibility, hardware failures, and plaintext communication faced by isolation devices during the upgrading and reinforcement process. It enhances the security control of data transmission channels in power monitoring systems and achieves an “efficient and unobtrusive” and “standardized” security upgrade and reinforcement of the isolation devices. This middleware has been successfully applied to all thermal power, hydropower, and new energy power stations of Huaneng Group, strengthening the cybersecurity boundary protection capabilities of critical information infrastructure in power monitoring and ensuring the information security of power production.

isolation device  /  security reinforcement  /  middleware  /  power monitoring system
马瑞瑞, 何清, 杨国栋, 王大鹏, 王毅, 杜保华. 电力专用横向单向隔离装置安全加固中间件设计及应用. 热力发电, 2025 , 54 (5) : 156 -162 . DOI: 10.19666/j.rlfd.202409205
Ruirui MA, Qing HE, Guodong YANG, Dapeng WANG, Yi WANG, Baohua DU. Design and application of security reinforcement middleware for interal unidirectional safety isolating device for electric power[J]. Thermal Power Generation, 2025 , 54 (5) : 156 -162 . DOI: 10.19666/j.rlfd.202409205
为筑牢电力监控系统边界防护,切实保证“安全分区、网络专用、横向隔离、纵向认证”的综合防护要求,电厂工控大区边界必须使用电力专用横向单向安全隔离装置[1-2](隔离装置)。隔离装置分为正向型和反向型。正向隔离装置[3]用于生产控制大区到管理信息大区的非网络方式的单向数据传输,反向隔离装置[4-5]用于从管理信息大区到生产控制大区的非网络方式的单向数据传输,是管理信息大区到生产控制大区的唯一数据传输途径[6]
随着网络技术的快速发展,电力系统面临的网络安全威胁日益严峻。隔离装置作为电力系统中的重要安全设备,其性能和安全性直接关系整个系统的稳定运行。电力系统部分在运隔离装置存在若干亟待解决的安全问题。首先,部分设备老化且缺乏必要的权威安全认证,存在安全防护的风险隐患。多数设备未能满足网络安全等级保护3.0标准的核心要求,如三权分立管理、强口令机制、IP/MAC绑定及全面的日志审计等,为系统安全埋下了隐患。其次,正向隔离装置在数据单向流动控制方面存在不足,未能全面遵循单比特应答策略,可能导致数据逆向泄露,危及生产控制大区网络的安全。此外,反向隔离装置缺乏对非E文本文件传输的有效限制[7-8]。E文件使用电力行业专用数据描述语言,具有严格的格式定义和校验规则。缺乏此类控制可能导致恶意软件或非法数据绕过安全屏障,对关键生产控制区域构成直接威胁。
为了全面贯彻落实总体国家安全观,进一步提升电力监控系统网络边界安全防护能力,《国家能源局综合司关于印发2021年电力安全监管重点任务的通知》明确提出了推进隔离装置整改的工作要求,据此需要对各发电企业工控大区边界正向、反向隔离装置开展安全加固工作。
本文设计了一种电力专用横向单向隔离装置安全加固中间件(安全加固中间件),该中间件作为业务系统与隔离装置之间的桥梁,集成了兼容性适配、文件格式矫正、加密认证、负载均衡及权限控制等核心功能,旨在确保业务连续性与数据安全性的同时,实现在运隔离装置“高效无感知”和“标准化”安全升级加固,提升电力监控系统网络边界的安全防护能力。
现有业务系统与隔离装置之间的复杂交互关系,决定了隔离装置安全加固不能直接采取粗暴的硬件更换或升级策略。
首先,部分正向隔离的业务系统因不满足单比特数据通信安全审计策略,若直接升级硬件,将导致数据通信中断和业务程序异常,需依赖业务系统开发商进行系统层面的适应性改造;其次,反向隔离的业务系统中普遍存在非E文本文件传输模式,构成了隔离装置加固升级过程中的另一大障碍。隔离装置硬件设备加固升级后,此类非标准传输模式将面临通信阻断的风险,业务系统需要同步升级以确保数据传输机制与隔离装置加固策略相兼容;最后,从通信安全与效率的角度出发,现有业务系统中明文通信及非压缩数据传输方式不仅降低了数据安全性,还造成了隔离装置带宽资源的浪费。因此,在硬件升级的同时,需要开展通信协议的优化与改进,使业务数据传输满足隔离装置新的传输规则,同时提升数据传输的安全性与效率,最大化利用隔离装置的性能潜力。
鉴于业务系统全面升级改造的高成本、时间不确定性和厂商支持等因素,本文认为探索并实施一种更为高效、安全且成本效益显著的解决方案至关重要。这种方案需综合考虑业务连续性、安全性与成本控制的平衡,为隔离装置的安全加固提供切实可行的路径。
中间件是一种独立的系统软件服务程序,分布式应用软件借助这种软件在不同的技术之间共享资源,中间件位于客户机服务器的操作系统之上,管理计算资源和网络通信,同时标准化不同操作系统提供的应用程序接口,实现协议的统一化,屏蔽具体操作细节。中间件技术为隔离装置的安全加固提供了新的思路和实践路径。
本文设计的安全加固中间件属于安全增强型中间件,专注于提升电力监控系统的安全性,特别是在涉及数据隔离、加密通信、权限控制等关键安全领域。通过在业务系统与隔离装置之间插入一层安全逻辑,解决了业务系统兼容性、硬件故障、明文通信等风险。
针对正向数据传输和反向文件传输2种不同的应用场景,本文分别设计并开发了正向隔离装置安全加固中间件和反向隔离装置安全加固中间件,以灵活应对不同场景下的安全挑战。
正向隔离装置加固中间件为第三方厂商业务系统建立安全稳定的数据传输通道,适配正向隔离装置单比特应答要求。反向隔离装置安全加固中间件则更专注于实现文件的安全回传与验证,支持多种类型文件与E文本文件的相互转换,确保文件符合反向隔离装置的传输要求。正向/反向隔离装置加固中间件都可对数据进行加密、压缩处理,提高数据传输效率,增加传输数据安全性。
安全加固中间件采用分层体系架构,由基础服务层、通用功能层、应用层组成,其架构如图1所示。
基础服务层包括跨平台基础库、跨平台系统服务库、基础通信库。跨平台基础库为Windows、Linux操作系统提供一致的标准函数、类型、线程和锁使用接口。跨平台系统服务库为Windows、Linux操作系统提供一致的服务程序编程框架及接口。基础通信库提供TCP通信的封装,包括常见Socket编程接口的封装。
通用功能层主要是为提高软件的易用性以及方便监视软件的性能。包括日志、软件配置、性能监控模块。日志模块支持本地日志及日志按模块分仓存储处理。软件配置模块对软件提供运行参数的配置,如正向隔离装置加固中间件TCP通信IP、端口,反向隔离装置加固中间件E文件转换、还原路径等参数的配置。性能监控模块方便分析隔离装置加固中间件的运行状态,包含CPU使用率、内存占用、网络流量分析。
应用层是隔离加固中间件的核心业务层,集成了公用业务、正向隔离装置业务及反向隔离装置业务3大模块。公用业务模块涵盖故障冗余与负载均衡、数据压缩/解压及加密/解密功能,确保系统高可用、提升传输效率并保障数据安全。正向隔离装置业务模块应用于正向隔离装置安全加固中间件,专注于数据透明转发、审计拦截及单比特报文转换,有效管理内外网间数据流动,增强通信安全性。反向隔离装置业务模块应用于反向隔离装置安全加固中间件,通过E文本文件的高效安全转换/还原功能,支持灵活的文件转换需求。整体而言,应用层实现了业务功能的全面覆盖与高效协同。
通过正向隔离装置发送数据和返回数据逻辑如图2所示。正向隔离装置单比特数据通信安全审计策略对内网客户端向外网服务器发送数据不做限制,对外网服务端返回内网客户端的每个报文,只允许为1 bit数据,其值只能是“0x00”或者“0xff”,通常用于确认已经收到客户端的数据,表明处理成功或失败。单比特应答审计策略确保了数据只能从高安全级别区域向低安全级别区域单向流动,防止了潜在的反向数据流动,从而保护生产控制大区网络不受外部威胁。
为满足上述审计策略,实现业务系统与正向隔离装置兼容适配,正向隔离装置安全加固中间件对内网业务系统客户端发往外网业务系统服务端的数据包进行透明转发,对外网业务系统服务端返回内网业务系统客户端的数据包(响应报文)进行审计拦截或单比特报文转换。
针对拦截部分返回数据包不影响业务系统正常通信的场景,加固中间件将对不满足单比特数据通信安全审计策略的数据包进行拦截。针对拦截部分返回数据包会引起业务系统通信中断的场景,加固中间件通过报文协议转换配置,实现返回数据包的单比特报文转换。
例如:某电厂业务系统服务端从外网返回错误码到内网客户端,错误码由8个“0x00”或“0xff”单比特包组成。内网业务系统客户端需要收到所有单比特包,否则业务将被中断。安全加固中间件服务器端将所有返回非零的错误码(非8个“0x00”)转换为1个单比特包“0xff”,将连续8个“0x00”转换为1个单比特包“0x00”进行处理并传输。穿隔离装置单比特传输后,安全加固中间件客户端将接收到的“0x00”还原为8个连续“0x00”(对应二进制为“00000000”,表示成功),将“0xff”还原为“0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff”(对应二进制为“00000001”,该错误码可被业务系统识别并处理)并发送至业务系统客户端,系统正常运行。该示例中错误码配置转换见表1
这种报文转换策略将所有非零的错误码使用业务系统可处理的某个错误码代替,虽然牺牲了错误码的准确性,但确保了业务系统的稳定运行并符合新的安全审计要求。
针对现有部分早期的业务系统使用明文通信,并且通信数据未采用压缩传输,造成数据安全性低、隔离装置带宽资源利用率不高的问题,通过在加固中间件中引入可配置的数据压缩及加密模块[9-10],在现有业务系统不做任何改动的情况下,实现数据的压缩和加密传输。
当大量数据穿隔离装置传输时,会造成隔离装置负载过高、数据传输链路不稳定。此时加固中间件客户端可根据用户配置对数据进行压缩处理,通过减小隔离装置带宽占用,达到提高隔离装置传输效率和业务系统稳定性的目的。通过隔离装置后,由加固中间件服务端进行数据解压,并将解压后的数据发送至业务系统服务端。加固中间件默认使用LZ4压缩算法[11-12],该压缩算法具有压缩和解压速度快的特点,同时可配置使用Zstandard压缩算法[13-14]。该压缩算法以其高压缩比而闻名,但压缩和解压速度方面则LZ4更优。对某电厂的业务系统真实传输数据实测表明,默认配置下,Zstandard压缩算法与LZ4压缩算法比较,前者压缩速度约为后者的75%,解压速度约为后者的的50%,但压缩率较后者提高了约13%。使用Zstandard压缩,带宽占用约为未开启压缩带宽占用的43%,使用LZ4压缩,带宽占用约为未开启压缩带宽占用的56%。用户可根据现场业务系统需要选择更快压缩/解压速度的LZ4压缩算法,或更高压缩率的Zstandard压缩算法。
在设计安全加固中间件时,加密传输技术是确保数据安全的关键环节。生产控制大区与管理信息大区之间使用正向/反向隔离装置传输数据时,使用明文进行数据传输存在较大安全隐患。此时可通过加固中间件客户端对跨域传输的数据进行加密处理,增加系统安全性。数据加密算法使用SM4对称国密算法[15-16]。加密算法与密钥扩展算法都采用32轮非线性迭代结构设计,大大增加了破解难度,具有高效性和高安全性的特点。
该解决方案多次在国家网络安全防护演练中成功应对网络攻击并为企业解决了老旧业务系统难以通过数据安全性检测的问题,确保了数据流转过程的完整性与机密性。
针对反向隔离装置升级加固后将禁止非E文本文件数据通信问题,本文提出了反向隔离装置E文本文件自适应转换技术[17]。该技术支持任意文件格式和标准E文本文件格式高效安全互转换,实现了现有业务系统无需任何修改,即可满足升级加固后的反向隔离装置强制E文件传输的安全要求,提高了反向隔离装置升级加固后业务系统的兼容性和安全性。
该技术包括反向隔离装置加固中间件客户端和服务端2个部分的处理。
第1步,加固中间件客户端将非E文件转换为E文件。加固中间件客户端加载非E文件,对文件数据进行CRC校验[18]计算,根据用户配置对文件数据进行压缩和加密[19]处理,然后将处理后的二进制数据转换为16进制字符,并按照E语言格式组织,再次进行CRC校验。
第2步,加固中间件服务端将转换后的E文件还原为原始文件格式。加固中间件服务端接收到E文本文件后,首先验证转换标识和头部信息,然后对文本进行CRC校验,确保数据未被篡改或损坏。确认无误后,将16进制文本还原为二进制数据,并根据需要进行解压或解密,最终恢复为原始文件格式。
该技术通过确保所有非E格式文件在通过反向隔离装置前转换为遵循严格标准的E文本文件,有效防止了恶意软件或非法数据未经校验直接渗透至生产控制大区。转换过程中集成的数据校验机制及加密压缩处理,进一步加固了数据的安全性,确保数据的完整性和机密性不被破坏,不仅增强了系统的防御能力,还提高了对潜在安全威胁的识别和应对能力。
针对单路隔离网络架构不具备数据链路冗余能力,设备故障或数据通信量大时,会造成业务中断或数据丢失的问题,本文设计了隔离装置中间件多路冗余架构和负载均衡算法,实现了隔离装置数据传输通道高可用和带宽扩展的功能,可满足对数据传输带宽和稳定性具有更高要求的应用场景。图3为隔离装置多路冗余和负载均衡软硬件拓扑。
图3所示,安全加固中间件客户端可连接并管理多路正向隔离装置,实现数据传输链路多路冗余[10-21]和负载均衡。当各路隔离装置运行正常时,加固中间件客户端根据网络负载情况对数据进行多路分发,可提高数据链路的带宽。当某路隔离装置故障时,加固中间件客户端检测到连接断开,则不再给该数据链路分发数据。该方式虽然整体网络带宽被降低,但不影响业务系统数据传输;当加固中间件客户端检测到隔离装置故障恢复重连后,该隔离装置会被及时并入正常数据链路中,参与负载均衡数据传输。
反向隔离装置的数据传输链路多路冗余和负载均衡处理方法和正向隔离装置类似,区别在于负载均衡分发时,加固中间件客户端通过反向隔离装置的文件摆渡目录中现存未摆渡文件的大小来进行负载均衡权重计算。现存未摆渡文件越小,表示负载越小,则优先进行文件分发。当加固中间件客户端检测到某路反向隔离装置故障时,则将该反向隔离装置负责摆渡的文件快速分发到其他路反向隔离装置,确保文件摆渡不中断。
截至2024年6月,安全加固中间件在华能集团32个产业公司及区域公司下属的900多家燃煤、燃气、水电、风电、光伏企业或场站实施推广,近千台在运隔离装置完成升级加固,其中完成约70%正向隔离装置、30%反向隔离装置的“高效无感知”和“标准化”安全升级加固。
北方联合电力有限责任公司(北方公司)是中国华能集团的区域子公司,是内蒙古自治区最大的发电供热企业。2021年底至2023年期间,北方公司全面采用安全加固中间件对所属18家单位部署在生产控制大区与管理信息大区边界的在运隔离装置进行升级加固,涵盖17家火电厂、1家新能源公司(风电总部及公司各场站),共部署安全加固中间件36套。
隔离装置硬件设备延用原厂商进行升级加固工作,对于原厂家设备不能满足安全加固工作要求的,替换为满足国网电科院认证的隔离装置。在运隔离装置完成硬件升级加固工作的同时,同步完成安全加固中间件的部署及调试。
针对正向数据传输的场景,在内网业务系统与正向隔离装置之间,以及正向隔离装置与外网业务系统之间,分别部署正向隔离装置安全加固中间件客户端和服务端,具体如图4所示。
针对反向文件传输的场景,在原“文件发送目录”和反向隔离装置之间部署反向隔离装置安全加固中间件客户端和新“文件发送目录”,在反向隔离装置和原文件接收目录之间部署新文件接收目录和反向隔离装置安全加固中间件服务端,具体如图5所示。
经现场检验测试,隔离装置升级加固后,数据通信和应用数据刷新均达到预期效果。安全加固中间件的引入,有效隔离了第三方厂家软件与生产控制大区之间的直接通信,降低了外部攻击或非法数据渗透的风险,提升了系统的整体安全防护水平。
安全加固中间件在业务系统所在管理信息大区和生产控制大区间构建了一道坚实的安全屏障。加密传输确保了跨域传输数据的机密性,防止了敏感信息泄露,强化了电力监控系统数据传输通道的安全管控。同时,安全加固中间件的设计充分考虑了与现有业务系统的兼容性,避免了硬件更换和业务系统升级带来的高昂成本和时间风险。与直接硬件升级或修改业务系统代码等方案相比,安全加固中间件在保持业务连续性和提升系统安全性方面展现出了独特的优势,极大提升了交付效率,降低了运维成本,经济效益显著。
本文设计了一种电力专用横向单向隔离装置安全加固中间件,有效解决了隔离装置在安全加固过程中面临的业务系统兼容性、硬件故障及明文通信等安全风险。通过标准化、资源优化和增强的安全处理逻辑,为电力监控信息系统的安全稳定运行提供了有力保障。该安全加固中间件已成功应用于中国华能集团所有火电、水电和新能源电站,强化了电力监控关键信息基础设施网络安全边界防护能力,保障了电力生产的信息安全,促进了国内工业互联网的安全升级,取得了良好的社会效益。
未来,我们将继续探索更安全高效的加密算法、优化安全加固中间件的性能,并扩大其应用范围,以进一步提升电力系统的整体安全防护能力。
  • 中国华能集团有限公司总部科技项目(HNKJ24-H28; HNKJ24-H57)
  • 陕西省科技计划项目(2024GX-YBXM-156)
参考文献 引证文献
排序方式:
[1]
杨鹏. 大型发电厂电力监控系统安全防护方案设计及工程实践[J]. 电工技术, 2023(12): 186-189.
YANG Peng. Design and engineering practice of security protection scheme for large plant power monitoring system[J]. Electric Engineering, 2023(12): 186-189.
[2]
杨至元, 张仕鹏, 孙浩. 电力系统信息物理网络安全综合分析与风险研究[J]. 南方能源建设, 2020, 7(3): 6-22.
YANG Zhiyuan, ZHANG Shipeng, SUN Hao. Integrated cyber-physical contingency analysis and risk estimates[J]. Southern Energy Construction, 2020, 7(3): 6-22.
[3]
曹翔, 张阳, 宋林川, 等. 基于深度报文检测和安全增强的正向隔离装置设计及实现[J]. 电力系统自动化, 2019, 43(2): 162-167.
CAO Xiang, ZHANG Yang, SONG Linchuan, et al. Design and implementation of a forward isolation device based on deep packet inspection and security enhancement[J]. Automation of Electric Power Systems, 2019, 43(2): 162-167.
[4]
申永辉. 电力专用安全隔离装置的原理和应用[J]. 湖南电力, 2006(6): 31-33.
SHEN Yonghui. Principle and application of power specific safety isolation devices[J]. Hunan Electric Power, 2006(6): 31-33.
[5]
郭仁超, 徐玉韬. 内外网数据安全交换技术在电网企业的应用研究[J]. 电力大数据, 2018, 21(2): 61-66.
GUO Renchao, XU Yutao. Research on the application of internal and external network data security exchange technology in power grid enterprises[J]. Power Big Data, 2018, 21(2): 61-66.
[6]
可再生能源发电站电力监控系统网络安全防护技术规范[S]. 北京: 中国标准出版社, 2018: 1.
Technical specification for cyber security protection of electric power system supervision and control in renewable energy power station[S]. Beijing: China Standard Press, 2018: 1.
[7]
杜鹏, 陶洪铸, 高保成, 等. 面向多应用的通用数据采集技术方案[J]. 电力系统自动化, 2015(1): 26-30.
DU Peng, TAO Hongzhu, GAO Baocheng, et al. A universal data collection technology solution for multiple applications[J]. Automation of Electric Power Systems, 2015(1): 26-30.
[8]
李丽芬, 程晓荣, 吴克河. 计算机网络体系结构[M]. 北京: 中国电力出版社, 2006: 1.
LI Lifen, CHENG Xiaorong, WU Kehe. Computer network architecture[M]. Beijing: China Electric Power Press, 2006: 1.
[9]
曹井万. 数据加密和单向网闸技术在流程行业的应用研究[J]. 信息记录材料, 2022, 23(6): 161-164.
CAO Jingwan. Research on the application of data encryption and unidirectional gateway technology in the process industry[J]. Information Recording Materials, 2022, 23(6): 161-164.
[10]
陈志军, 洪莎莎. 跨网络信息安全交换平台建设方案研究[J]. 数字通信世界, 2021(5): 80-81.
CHEN Zhijun, HONG Shasha. Research on the construction plan of cross network information security exchange platform[J]. Digital Communication World, 2021(5): 80-81.
[11]
程裕博. 基于网络多路径和数据压缩的IPFS文件传输性能优化研究[D]. 重庆: 重庆理工大学, 2024: 1.
CHENG Yubo. Research on IPFS file transfer performance optimization based on network multipass and data compression[D]. Chongqing: Chongqing University of Technology, 2024: 1.
[12]
吴涛. 基于LZ4算法的无损压缩硬件设计与WIFI传输[D]. 南京: 东南大学, 2021: 1.
WU Tao. Hardware design of lossless compression based on LZ4 algorithm and WIFI transmission[D]. Nanjing: Southeast University, 2021: 1.
[13]
徐雪强. 基于自适应压缩算法的远程数据采集系统设计与应用[D]. 哈尔滨: 黑龙江大学, 2023: 1.
XU Xueqiang. Design and application of remote data acquisition system based on adaptive compression algorithm[D]. Harbin: Heilongjiang University, 2023: 1.
[14]
王炳耀. Zstd压缩算法的硬件设计与验证[D]. 西安: 西安电子科技大学, 2023: 1.
WANG Bingyao. Hardware design and verification of Zstd compression algorithm[D]. Xi’an: Xidian University, 2023: 1.
[15]
宋永立, 孙若尘, 贾娟, 等. 基于国密算法的CoAP安全协议研究与实现[J]. 计算机工程与设计, 2024, 45(7): 2066-2073.
SONG Yongli, SUN Ruochen, JIA Juan, et al. Research and implementation of CoAP security protocol based on domestic cryptographic algorithms[J]. Computer Engineering and Design, 2024, 45(7): 2066-2073.
[16]
ABED S, JAFFAL R, MOHD B J, et al. Performance evaluation of the SM4 cipher based on field-programmable gate array implementation[J]. IET Circuits, Devices & Systems, 2021, 15(2): 121-135.
[17]
陈少立, 何清, 王奕飞, 等. 一种通过反向网闸同步非E文件的方法: CN202111299310.4[P]. 2024-02-23 [2024-05-16].
CHEN Shaoli, HE Qing, WANG Yifei, et al. A method of synchronizing non E files through reverse gateway: CN202111299310.4[P]. 2024-02-23[2024-05-16].
[18]
罗长洲, 马梦宇, 李萌, 等. CRC校验码软件生成技术原理分析[J]. 计算机仿真, 2024, 41(3): 158-161.
LUO Changzhou, MA Mengyu, LI Meng, et al. Principle Analysis of CRC checksum software generation system[J]. Computer Simulation, 2024, 41(3): 158-161.
[19]
任晨, 刘立, 陈鹏, 等. 一种基于隔离网闸的大文件高效传输方案[J]. 信息化建设, 2021(2): 62-64.
REN Chen, LIU Li, CHEN Peng, et al. An efficient transmission scheme for large files based on isolation network gates[J]. Informatization Construction, 2021(2): 62-64.
[20]
白燕. 基于网闸的双机热备系统的设计与实现[D]. 北京: 北京理工大学, 2016: 1.
BAI Yan. Design and implementation of a dual machine hot backup system based on network gates[D]. Beijing: Beijing Institute of Technology, 2016: 1.
[21]
杨越, 王若冰, 刘瑞, 等. 基于多传输通道的单向传输技术研究[J]. 计算机应用与软件, 2017, 34(4): 135-141.
YANG Yue, WANG Ruobing, LIU Rui, et al. Research on unidirectional transmission technology based on multiple transmission channels[J]. Computer Application and Software, 2017, 34(4): 135-141.
2025年第54卷第5期
PDF下载
96
41
引用本文
BibTeX
文章信息
doi: 10.19666/j.rlfd.202409205
  • 接收时间:2024-09-04
  • 首发时间:2026-03-06
  • 出版时间:2025-05-25
补充材料
相关文章
文章信息
作者
出版历史
  • 收稿日期:2024-09-04
基金
Science and Technology Project of China Huaneng Group Co., Ltd.(HNKJ24-H28; HNKJ24-H57)
中国华能集团有限公司总部科技项目(HNKJ24-H28; HNKJ24-H57)
Shaanxi Provincial Science and Technology Plan Project(2024GX-YBXM-156)
陕西省科技计划项目(2024GX-YBXM-156)
作者信息
    西安热工研究院有限公司,陕西 西安 710054
参考文献
分享链接
https://castjournals.cast.org.cn/joweb/rlfd/CN/10.19666/j.rlfd.202409205
分享至
全文二维码

扫描看全文

引用本文
BibTeX
本文的引用情况
2种不同金属材料的力学参数

Family
属数
Number of
genus
种数
Number of
species
占总种数比例
Percentage of
total species (%)

Genus
种数
Number of
species
占总种数比例
Percentage of total
species (%)
鹅膏菌科Amanitaceae 2 11 5.26 鹅膏菌属 Amanita 10 4.78
小菇科 Mycenaceae 2 12 5.74 丝盖伞属 Inocybe 5 2.39
多孔菌科 Polyporaceae 8 14 6.70 蜡蘑属 Laccaria 5 2.39
红菇科 Russulaceae 3 23 11.00 小皮伞属 Marasmius 6 2.87
小菇属 Mycena 11 5.26
光柄菇属 Pluteus 5 2.39
红菇属 Russula 17 8.13
栓菌属 Trametes 5 2.39
关闭全屏