The Bepcii Control Network Real-time Data Sharing Of Security Mechanisms

In the project of BEPCII (The Upgrade Beijing Electron Positron Collider), the control system has adopted EPICS (Experimental Physics and Industrial Control System) system as its basic software development platform. Since EPICS is an Ethernet-based distributed architecture system , the control network is an important component of EPICS. After studying the EPICS hardware and software architecture, Channel Access protocol, EPICS control network structure as well as BEPCII network topology, the author of this article established EPICS CA Gateway workstations which are based on the Channel Access protocol to meet the requirements of secure and transparent data share between the different VLAN within the BEPCII control network. By setup BEPCII CA Gateway workstations, Oracle database server and Acquisition Data system moved to the campus network, so that the network problem due to UDP broadcast within the BEPCII control network has been decreased.In order to guarantee the safe operation of equipment and ensure the real-time signal access by authority, the author developed a network data security access control strategy based on the Channel Access Security, regulate the different levels of user authority, and setup several different access groups belong to the different type signals.In order to monitor the Oracle database and Acquisition Data system and the BEPCII CA Gateway, the author developed the automatic alarm SMS services software. The BEPCII control network can be monitored automatically by using this software.