CN112465322A - User management device applied to substation automation system - Google Patents

User management device applied to substation automation system Download PDF

Info

Publication number
CN112465322A
CN112465322A CN202011300565.3A CN202011300565A CN112465322A CN 112465322 A CN112465322 A CN 112465322A CN 202011300565 A CN202011300565 A CN 202011300565A CN 112465322 A CN112465322 A CN 112465322A
Authority
CN
China
Prior art keywords
user
login
password
server
client
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011300565.3A
Other languages
Chinese (zh)
Inventor
朱斌斌
张金虎
李宝潭
张思远
陈可柯
李金芳
李燕
陶颍军
赵中华
崔丽艳
张亚萍
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xuji Group Co Ltd
China Electric Power Research Institute Co Ltd CEPRI
XJ Electric Co Ltd
Xuchang XJ Software Technology Co Ltd
Original Assignee
Xuji Group Co Ltd
China Electric Power Research Institute Co Ltd CEPRI
XJ Electric Co Ltd
Xuchang XJ Software Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Xuji Group Co Ltd, China Electric Power Research Institute Co Ltd CEPRI, XJ Electric Co Ltd, Xuchang XJ Software Technology Co Ltd filed Critical Xuji Group Co Ltd
Priority to CN202011300565.3A priority Critical patent/CN112465322A/en
Publication of CN112465322A publication Critical patent/CN112465322A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/06Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G06Q10/063Operations research, analysis or management
    • G06Q10/0631Resource planning, allocation, distributing or scheduling for enterprises or organisations
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/451Execution arrangements for user interfaces
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/06Electricity, gas or water supply

Abstract

The invention discloses a user management device applied to a transformer substation automation system, which comprises: the system comprises a server and a plurality of clients which are communicated with the server through an ICE bridge respectively; the client side logs in, verifies and logs out the user and sends the login information of the user to the server side; and the server checks the login information and the service checking requirement and returns a checking result to the client. Through a universal client user management mode, service processing and flow control are separated, service logic is centralized on a server for processing, and a client performs user login mode control and user data acquisition, so that the service load of the client is reduced, the safety and effectiveness of user login information are ensured, the unified and simple login and verification interface is realized, and the interaction friendliness of a human-computer interface is improved.

Description

User management device applied to substation automation system
Technical Field
The invention relates to the technical field of power equipment control, in particular to a user management device applied to a substation automation system.
Background
In the construction of the automatic system of the transformer substation, along with the continuous enhancement of safety consciousness, a stable and effective safety system needs to be constructed. As an important part of the security system, user management is performed throughout various operation links in the automation system. The user management has many problems, and relevant modules of user login, verification and other operations develop own management modules, so that the interfaces are inconsistent, the verification conditions are different, the chaotic impression of a human-computer interface is caused, the use experience of the user is influenced, and the repeated workload is caused for later-stage multi-module maintenance. The development of multiple modules is complex for the development of subsequent audit logs and authority management. The large design and maintenance workload inevitably causes negligence and omission of safety, and causes hidden danger to the management safety.
Disclosure of Invention
The embodiment of the invention aims to provide a user management device applied to a substation automation system, which separates service processing and flow control through a universal client user management mode, centralizes service logic in a server for processing, and controls a user login mode and acquires user data by a client, thereby reducing the traffic pressure of the client, ensuring the safety and effectiveness of user login information, realizing uniform and simple login and verification interfaces and increasing the interaction friendliness of a human-computer interface.
To solve the above technical problem, an embodiment of the present invention provides a user management device applied to a substation automation system, including: the system comprises a server and a plurality of clients which are respectively communicated with the server through an ICE bridge;
the client side logs in, verifies and logs out the user, and sends the login information of the user to the server side;
and the server checks the login information and the service checking requirement and returns a checking result to the client.
Further, the login information includes: user ID, user status, Token, and heartbeat time.
Further, the user status includes: disable, lock, IP disable, and login period disable.
Further, the user verification includes: checking a logged-in user and checking an unregistered user;
the verification of the logged-in user comprises the following steps: verifying the login password of the user;
the verification of the unregistered user comprises the following steps: and verifying the user name and the login password of the user.
Further, the user login comprises:
performing login operation on the logged-in user to verify the login state of the user; or
Performing login operation on the logged-in user to verify the user name and the password of the user; or
And performing login operation on the client side where the user logs in, so that the new user performs preemptive login.
Further, the server is based on an RBAC design mode, and the role model of the server adopts a design mode of cardinal number constraint and role mutual exclusion to limit roles;
wherein the roles include: system administrators, system auditors, system configurators, administrators, users, and/or visitors.
Further, the server side controls the authority of the resource in the automation system;
wherein the resources include menus, buttons, devices, and/or partitions in the system.
Further, the client may only keep one of the users online;
and after receiving the user information logged in other clients, the server returns invalid login information to the currently logged-in client.
Further, the service interface of the service end includes: a service interface with an interface and a service interface without an interface;
the service interface without an interface comprises: user authentication, user logout, current user update acquisition, judgment whether a user has a designated legal authority or not, password modification, error reason acquisition, current process unique mark acquisition, current user IP white list acquisition, current user responsibility partition list acquisition, role information list acquisition, user information list acquisition under a certain role and/or a start/stop check token acquisition;
the service interface with interface comprises: pop-up user login window, pop-up user authentication window, pop-up user logout window, pop-up user modified password window, and/or pop-up guardian authentication window.
Further, the process of user login includes:
the client checks the non-null and length of the user name and the password, firstly judges for the first time according to the returned result of the user authority, and controls the server to verify the user login information after the authority check is passed;
the user login information verification sequence is as follows: if the current user authentication result is that the user is locked/disabled/IP disabled/login period disabled, returning authentication failure and requiring user replacement;
carrying out user password verification, if the user password is mistakenly returned, and locking the current user when the password is mistakenly returned for a certain number of times;
and after the password passes the verification, judging whether the user logs in for the first time or the password validity period expires, if so, requiring the user to change the password, setting a new password validity period after the password is changed, and allowing the user to log in.
The technical scheme of the embodiment of the invention has the following beneficial technical effects:
through a universal client user management mode, service processing and flow control are separated, service logic is centralized on a server for processing, and a client performs user login mode control and user data acquisition, so that the service load of the client is reduced, the safety and effectiveness of user login information are ensured, the unified and simple login and verification interface is realized, and the interaction friendliness of a human-computer interface is improved.
Drawings
FIG. 1 is a block diagram of an overall structure of a user management device according to an embodiment of the present invention;
fig. 2 is a flowchart of IP verification of a user management device according to an embodiment of the present invention;
FIG. 3 is a timing diagram illustrating user login of a user management device according to an embodiment of the present invention;
FIG. 4 is a timing diagram illustrating user authentication of a user management device according to an embodiment of the present invention
FIG. 5 is a timing diagram illustrating user logout procedures of a user management apparatus according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings in conjunction with the following detailed description. It should be understood that the description is intended to be exemplary only, and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.
Fig. 1 is a frame diagram of an overall structure of a user management device according to an embodiment of the present invention.
Referring to fig. 1, an embodiment of the present invention provides a user management device applied to a substation automation system, including: the server and a plurality of clients which are respectively communicated with the server through an ICE bridge. The client side logs in, verifies and logs out the user, and sends the login information of the user to the server side. And the server checks the login information and the service checking requirement and returns a checking result to the client.
The client is responsible for establishing and maintaining a communication link with the server, the client is responsible for packaging and sending the machine name/IP binding user name and the password to the server, and the server returns user information (comprising the user name, the residual login time and Token) to the client according to the user information and the service verification requirement provided by the client. The server side provides other service checking functions such as authority checking, IP white list obtaining and the like for the client side, and returns a checking result.
Fig. 2 is a flowchart of IP verification of a ue according to an embodiment of the present invention.
FIG. 3 is a timing diagram illustrating user login of a user management device according to an embodiment of the present invention;
FIG. 4 is a timing diagram illustrating user authentication of a user management device according to an embodiment of the present invention
FIG. 5 is a timing diagram illustrating user logout procedures of a user management apparatus according to an embodiment of the present invention.
Referring to fig. 2, 3, 4 and 5, the client provides login, authentication and logout services for a user, and the three services can be divided into a call interface with an interface and a call interface without an interface for the user to select. As the basis of all the system usage, the user must call the user login interface to log in the user, and can perform other operations after successful login.
Specifically, the login information of the user includes: user ID, user status, Token, and heartbeat time.
Further, the user states include: disable, lock, IP disable, and login period disable.
Specifically, the checking of the user login includes: the method comprises the following steps of checking a logged user and a logged-in user, wherein the checking of the logged-in user comprises the following steps: the login password of the user is verified, and the verification of the user who does not log in comprises the following steps: and checking the user name and the login password of the user.
And when the user logs in, the client locks the current logged-in user, only checks the password of the user, and does not need to verify the password of the user to the server. When the user does not log in, the client does not need to carry out a standard user login process, and only needs to verify the user name and the password.
When the user logs off, the client notifies the user name to the server, the server completes the log-off operation, and a successful result is returned to the client.
Specifically, the user login comprises three conditions, namely login operation is carried out on a logged-in user to verify the login state of the user; secondly, login operation is carried out on the logged-in user so as to verify the user name and the password of the user; and thirdly, performing login operation on the client side where the existing user logs in so as to enable a new user to perform preemptive login.
Furthermore, the server is based on the RBAC design mode, the role model of the server limits the roles by adopting a design mode of cardinality constraint and role mutual exclusion so as to ensure the accuracy of the permissions, and the permissions have transitivity in the unified model of the roles so as to ensure the effectiveness of the permissions. Wherein, the role includes: system administrators, system auditors, system configurators, administrators, users, and/or visitors.
Specifically, the server side controls the authority of the resources in the automatic system; wherein the resources include menus, buttons, devices, and/or partitions in the system. Specifically, the method includes the steps of function menus in an automation system, button controls on an interface, modification of a database, file editing, left and right mouse button operation implementation and the like.
Specifically, the client can only keep one user online; and after receiving the user information logged in other clients, the server returns invalid login information to the currently logged-in client.
Further, the user management rules are: one machine only has one user online, the same user can only log in on one machine (the login is judged to be invalid on the other machine), the server side is provided with an enabling mark, the machine name/IP is automatically transmitted by a communication link without being processed by a client side, only part of applications (a control panel, online monitoring and the like) can log in, and the rest of the applications intelligently execute the verification function.
Specifically, the service interface of the service end includes: a service interface with an interface and a service interface without an interface; the service interface without the interface comprises: user authentication, user logout, current user acquisition, judgment whether the user has a designated legal authority, password modification, error reason acquisition, current process unique mark acquisition, current user IP white list acquisition, current user responsibility partition list acquisition, role information list acquisition, user information list acquisition under a certain role and/or a start/stop check token. The service interface with interface includes: pop-up user login window, pop-up user authentication window, pop-up user logout window, pop-up user modified password window, and/or pop-up guardian authentication window.
In the technical solution, a design process of a user management device includes:
1. server module development and deployment
The server module is used as an authentication service module for user management, and meets various authentication requirements of the client, such as user name and password verification, authority verification and the like. And the service end carries out distributed deployment, and the ICE bridge carries out service discovery through IP + PROT and determines a main service process. The present invention is described with respect to functional verification logic for a client. The client and the server communicate through an ICE bridge to realize distributed deployment. The server and the client communicate through the ICE bridge.
2. Client module development and deployment
The service interfaces provided by the client to the outside are divided into interfaces with interfaces and interfaces without interfaces. The service without the interface comprises the functions of user authentication, user logout, current user novelty acquisition, judgment on whether the user has a designated legal right, password modification, error reason acquisition, current process unique mark acquisition, current user IP white list acquisition, current user responsibility partition list acquisition, role information list acquisition, user information list acquisition under a certain role, token starting/stopping verification and the like. The service with interface includes popping up user login window, user verification window, user logout window, password modification window and guardian verification window.
3. As the guarantee of the security, when any module or subsystem in the system is operated or modified, the user logs in so as to facilitate the audit log record, the operation history record and the like in the later period. The standard user login process is that the client side checks the non-null and length of the user name and the password, first judgment is carried out according to the returned result of the user authority, and the server side carries out user login information verification after the authority passes.
The verification sequence is as follows: and if the current user authentication result is that the user is locked/disabled/IP disabled/login period disabled, returning authentication failure and requiring to replace the user. And then, carrying out user password verification, if the user password is mistakenly returned, and locking the current user when the password is mistakenly returned for a certain number of times. After the password passes the verification, whether the user logs in for the first time or the password validity period expires is judged, if the user is required to change the password, a new password validity period can be set only after the password is changed, and the user is allowed to log in.
The user can call the corresponding interface according to the self service requirement. Other operations of the system may be performed only if the interface verification returns a success.
The following objects are defined in step 1: rights resource, user, role, group. In the substation automation system, a menu, a button, equipment and a partition can be regarded as resources and are distinguished through resource types. Intangible operational controls may also serve as a privilege resource. The specific operator of the application system, the user obtains different authority information by endowing different roles. In order to classify and manage a plurality of users with similar permissions, the concept of roles is defined, such as roles of system administrators, system auditors, system configurators, administrators, users, visitors and the like. In order to better manage users, the users are grouped and classified, groups have a top-bottom relationship, and a tree view can be formed. The mutual exclusion of the authority is configured by a system configurator, the exclusive authority cannot be granted to the same role, and when different roles are granted to the same user, whether the exclusive authority is included is checked firstly.
In consideration of general design, user roles, roles and resources are in a multi-to-multi relationship, permissions among different roles in one user are mutually exclusive in access control requirements in safety specifications, requirements that the same user cannot be granted to the same role can be achieved by adding background filtering conditions, and the background service maintenance relationship is still in a multi-to-multi relationship, so that services can be reused when service requirements are changed later.
By the method, different tools in the operation period, the configuration period and the configuration period in the automatic system of the transformer substation can adopt the same user management module, and the permission resources only need to be expanded according to different services. Therefore, the development period of the tool can be shortened, only one set of basic service module needs to be maintained, the maintenance cost is reduced, and unified management is facilitated.
The embodiment of the invention aims to protect a user management device applied to a transformer substation automation system, which comprises: the system comprises a server and a plurality of clients which are communicated with the server through an ICE bridge respectively; the client side logs in, verifies and logs out the user and sends the login information of the user to the server side; and the server checks the login information and the service checking requirement and returns a checking result to the client. The technical scheme has the following effects:
through a universal client user management mode, service processing and flow control are separated, service logic is centralized on a server for processing, and a client performs user login mode control and user data acquisition, so that the service load of the client is reduced, the safety and effectiveness of user login information are ensured, the unified and simple login and verification interface is realized, and the interaction friendliness of a human-computer interface is improved.
It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.

Claims (10)

1. A customer management device for use in a substation automation system, comprising: the system comprises a server and a plurality of clients which are respectively communicated with the server through an ICE bridge;
the client side logs in, verifies and logs out the user, and sends the login information of the user to the server side;
and the server checks the login information and the service checking requirement and returns a checking result to the client.
2. The user management apparatus applied to the substation automation system according to claim 1,
the login information comprises: user ID, user status, Token, and heartbeat time.
3. The user management apparatus applied to the substation automation system according to claim 2,
the user states include: disable, lock, IP disable, and login period disable.
4. The user management apparatus applied to the substation automation system according to claim 1,
the user verification comprises the following steps: checking a logged-in user and checking an unregistered user;
the verification of the logged-in user comprises the following steps: verifying the login password of the user;
the verification of the unregistered user comprises the following steps: and verifying the user name and the login password of the user.
5. The user management apparatus applied to the substation automation system according to claim 1,
the user login comprises the following steps:
performing login operation on the logged-in user to verify the login state of the user; or
Performing login operation on the logged-in user to verify the user name and the password of the user; or
And performing login operation on the client side where the user logs in, so that the new user performs preemptive login.
6. The user management apparatus applied to the substation automation system according to claim 1,
the server is based on an RBAC design mode, and the role model of the server is limited by a design mode of cardinal number constraint and role mutual exclusion;
wherein the roles include: system administrators, system auditors, system configurators, administrators, users, and/or visitors.
7. The user management apparatus applied to the substation automation system according to claim 1,
the server side controls the authority of the resources in the automatic system;
wherein the resources include menus, buttons, devices, and/or partitions in the system.
8. The user management apparatus applied to the substation automation system according to claim 1,
the client can keep only one of the users online;
and after receiving the user information logged in other clients, the server returns invalid login information to the currently logged-in client.
9. The user management apparatus applied to the substation automation system according to claim 1,
the service interface of the server comprises: a service interface with an interface and a service interface without an interface;
the service interface without an interface comprises: user authentication, user logout, current user update acquisition, judgment whether a user has a designated legal authority or not, password modification, error reason acquisition, current process unique mark acquisition, current user IP white list acquisition, current user responsibility partition list acquisition, role information list acquisition, user information list acquisition under a certain role and/or a start/stop check token acquisition;
the service interface with interface comprises: pop-up user login window, pop-up user authentication window, pop-up user logout window, pop-up user modified password window, and/or pop-up guardian authentication window.
10. The user management apparatus applied to the substation automation system according to claim 1, wherein the process of the user login is:
the client checks the non-null and length of the user name and the password, firstly judges for the first time according to the returned result of the user authority, and controls the server to verify the user login information after the authority check is passed;
the user login information verification sequence is as follows: if the current user authentication result is that the user is locked/disabled/IP disabled/login period disabled, returning authentication failure and requiring user replacement;
carrying out user password verification, if the user password is mistakenly returned, and locking the current user when the password is mistakenly returned for a certain number of times;
and after the password passes the verification, judging whether the user logs in for the first time or the password validity period expires, if so, requiring the user to change the password, setting a new password validity period after the password is changed, and allowing the user to log in.
CN202011300565.3A 2020-11-19 2020-11-19 User management device applied to substation automation system Pending CN112465322A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011300565.3A CN112465322A (en) 2020-11-19 2020-11-19 User management device applied to substation automation system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011300565.3A CN112465322A (en) 2020-11-19 2020-11-19 User management device applied to substation automation system

Publications (1)

Publication Number Publication Date
CN112465322A true CN112465322A (en) 2021-03-09

Family

ID=74836663

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011300565.3A Pending CN112465322A (en) 2020-11-19 2020-11-19 User management device applied to substation automation system

Country Status (1)

Country Link
CN (1) CN112465322A (en)

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100050183A1 (en) * 2008-08-25 2010-02-25 Fujitsu Limited Workflow developing apparatus, workflow developing method, and computer product
CN102054025A (en) * 2010-12-01 2011-05-11 北京中交通信科技有限公司 Traffic information resource integration processing method and system
CN103001803A (en) * 2012-12-10 2013-03-27 上海斐讯数据通信技术有限公司 Method and system for achieving right management in network management
WO2015196817A1 (en) * 2014-06-26 2015-12-30 中兴通讯股份有限公司 Account number login method, apparatus and system
CN110661782A (en) * 2019-08-27 2020-01-07 紫光云(南京)数字技术有限公司 Public basic service system based on single sign-on and micro-service architecture and implementation method thereof
US20200136816A1 (en) * 2018-10-29 2020-04-30 Hewlett Packard Enterprise Development Lp Authentication using asymmetric cryptography key pairs
CN111368286A (en) * 2020-02-28 2020-07-03 深圳前海微众银行股份有限公司 Authority control method, device, equipment and storage medium

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100050183A1 (en) * 2008-08-25 2010-02-25 Fujitsu Limited Workflow developing apparatus, workflow developing method, and computer product
CN102054025A (en) * 2010-12-01 2011-05-11 北京中交通信科技有限公司 Traffic information resource integration processing method and system
CN103001803A (en) * 2012-12-10 2013-03-27 上海斐讯数据通信技术有限公司 Method and system for achieving right management in network management
WO2015196817A1 (en) * 2014-06-26 2015-12-30 中兴通讯股份有限公司 Account number login method, apparatus and system
US20200136816A1 (en) * 2018-10-29 2020-04-30 Hewlett Packard Enterprise Development Lp Authentication using asymmetric cryptography key pairs
CN110661782A (en) * 2019-08-27 2020-01-07 紫光云(南京)数字技术有限公司 Public basic service system based on single sign-on and micro-service architecture and implementation method thereof
CN111368286A (en) * 2020-02-28 2020-07-03 深圳前海微众银行股份有限公司 Authority control method, device, equipment and storage medium

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
天津滨海迅腾科技集团有限公司: "《基于工业互联网的SSM项目实战-物料订单管理系统》", 31 August 2018, 南开大学出版社, pages: 199 - 206 *
戴有炜 等: "《NT Server3.51中文版实用指南》", 31 July 1997, 清华大学出版社, pages: 172 - 105 *
曹天杰 等: "《计算机系统安全》", 高等教育出版社, pages: 172 - 175 *

Similar Documents

Publication Publication Date Title
CN101674285B (en) Single sign-on system and method thereof
CN105139139A (en) Data processing method, device and system for operation and maintenance audit
CN107919984A (en) Possess the O&M server and its management method of automatic upgrade function
CN111447180B (en) Security access control strategy for power Internet of things edge access management system
CN103685283B (en) The authentication and authorization system of a kind of communication network management and method
CN110719298A (en) Method and device for supporting user-defined change of privileged account password
CN113067843A (en) Security monitoring and linkage defense system and method for power distribution Internet of things network
CN106326736A (en) Data processing method and system
CN105356596B (en) The intensive remote-control system of unattended substation
CN104204973A (en) Dynamic configuration of industrial control system
CN105577686B (en) LAN single-point logging method based on network controller
Rysavy et al. A formal authorization framework for networked SCADA systems
US11716626B2 (en) Network access control system
CN105471905B (en) The realization method and system of AAA in a kind of stacking system
CN112465322A (en) User management device applied to substation automation system
Braband What's Security Level got to do with Safety Integrity Level?
CN110417769A (en) A kind of industry internet platform Multi Identity Attestation method
Afolaranmi et al. Providing an access control layer to web-based applications for the industrial domain
EP2450820B1 (en) User authentication system and plant control system having user authentication system
CN113923045A (en) Safety monitoring type intranet access control method and system
CN113885425A (en) Industrial field PLC network safety operation and maintenance method
CN113347202A (en) Account identification management system of centralized account management and control platform
CN112149078A (en) Auditing method and system for manufacturing execution system
Cheminod et al. Automatic analysis of security policies in industrial networks
Cheminod et al. System configuration check against security policies in industrial networks

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination