Research On Security Access Control Of Substation IED And Its Application

With development of communication technology in substation automation, the operation of substation will be an access process based on network. The access control of substation automation system is a key to ensure the information and control reliability. This thesis emphasis researches on substation IED (Intelligent Electronic Device) security access control mechanism and its realization based on IEC 61850. The work can be summarized in following points:(1) The Key of IED security access control is authentication, information security of messages and access control via study and analysis of substation ACSI model. We introduce some basic knowledge which relate to the thesis. According to the requirement of IED security, we design the active method of IED security access, the access control rules of IED data object, privilege distribution, and user distribution and so on.(2) The implementation model for IED security access control is designed based on IEC 62351 (Data and Communication Security for Power System). Firstly, the certificate authentication is realized by applying the Handshake Protocol. Secondly, the creative way of virtual access view is realized based on the dynamic properties of the virtual access view. Thirdly, because of the security requirements about the control command and data which are transmitted between the user and IED, we design a way that can protect the information via applying the Record Protocol. Then the security interface unit is designed to implement authentication, information security and parsed authority.(3) Contraposed the function module which is referred in security access control of substation IED, we realize some function in ZTEIC security control platform based on real application circumstance. And we define some interface function of security standard (IEC 62351).The ways satisfy the requirements of IED security access control in substation by analysisi of example and real-time.