Studing For The Security Of Real Time Information In The Data Network Of The Guizhou Electric Power

Mass amount of information scattered at different stations in the Guizhou Electric Power System is transferred through the Guizhou Electric Power Data Network. How to make sure about the security of the public data becomes an important practical problem.Every aspects of factors threatened the real time data security in Electric Power Data Network were analyzed in this thesis, based on the research of the modern technology and skills of the network security. Using the method of hierarchical network structure, a set of advice and consideration about the solutions of the problems is raised.In this thesis, the definition of the network security is made clear at first, then, the danger for the network, at last, some introductions of several popular skills used widely inside and outside China.Based on the research of the mechanism of the evaluation, this thesis focus on the most important part in the electric control centers--Electric Dispatch System, analyzing the most vulnerable points in the Guizhou Electric Power Data Network.First of all, the theorem of the network is discussed in this treatise. Then, aiming for the matter of fact, a set of preliminary solution project with a hierarchical network structure, including the physics layer, the network layer, the system layer, the application layer and the management layer, is worked out. The emphasis of this treatise focuses on three methods to achieve the security of the Guizhou Electric Power Data Network. They are the firewall, ACL and VPN. Then two kinds of technology-- Ipsec VPN and MPLS VPN are analyzed and compared. At the end of this treatise, a conclusion is drawn. That is to say that Ipsec is not suit for the Guizhou Electric Power Data Network. To this point, after synthesizing the feature of the security, the expansibility and the flexibility, this thesis conclude that MPLS VPN is a reasonable way out to connect all parts of businesses and operations in the Guizhou Electric Power System. By this means, different applications run within different VPNs, separately in logic, safely and extended well and if necessary, every department can get easy access to the bone net only through a physical interface and interact each other.The problem discussed in this thesis is valuable in every aspect of the information security, especially the real time data system. The solution can be also used in many similar systems.