CN213906705U - Safe communication system based on electric power wireless private network hybrid networking - Google Patents

Abstract

A safe communication system for hybrid networking of an electric wireless private network comprises a data acquisition terminal, a remote communication encryption module, an LTE communication module, a master station access device and a public network safe access platform, wherein the remote communication encryption module consists of an ARM processor, an encryption chip, the LTE communication module, a read-only memory and a power module; and a data interface of the ARM processor is respectively connected with the data interfaces of the encryption chip, the LTE communication module and the read-only memory, and the power supply module provides electric energy required by the communication system. The utility model discloses fully combine public network frequency channel and electric power private network frequency channel and application for wireless network technology advantage full play comes out, solves the information safety precaution problem among the wireless private network data transmission process of electric power. The utility model discloses circuit structure is tight, both can guarantee the quick transmission of data, can realize the safety monitoring again, has realized safe collection, transmission and the use of electric power business big data.

Description

Safe communication system based on electric power wireless private network hybrid networking

Technical Field

The utility model relates to the field of communication technology, especially a communication system by electric power wireless private network hybrid network.

Background

The power communication network is a special network serving various application services of a power system, and is the basis for realizing automatic control, information management and intelligent power grid of the power grid. Therefore, it is a critical issue to realize safe and stable operation of the power grid. The national power grid company constructs the driving energy Internet as a strategic target of the new information communication development, and lays a foundation for the rapid establishment of the terminal communication access network. The technical system of the terminal access communication can select modes such as an optical fiber private network, a power line carrier, a wireless public network, a wireless private network and the like. The wireless communication has the huge technical advantages of no need of communication channel construction, fast network deployment, strong system expansion capability and the like, and increasingly becomes the main mode of medium and long distance power terminal communication, but the existing frequency spectrum resources are deficient, how to integrate the existing communication systems, fully utilize the characteristics of the communication systems, realize the complementation of advantages and disadvantages, solve the problems of low network coverage rate, weak power service bearing capacity, poor broadband transmission capability and the like caused by the single communication system or the inherent defects of the communication technology, and become a subject to be researched urgently. In addition, with the innovation of wireless communication methods, information transmission security generated by the wireless communication methods is also gradually attracting attention of various social circles. The technical problem to be solved urgently in the industry is to provide a solution for fully combining and applying the frequency bands of the public network and the private power network by adopting encryption hardware so as to realize safe communication by pure software, effectively ensure the safety, reliability and high efficiency of power communication while fully utilizing frequency spectrum resources, and further bear more power services.

SUMMERY OF THE UTILITY MODEL

The utility model aims at overcoming current communication system's defect, providing a safe communication system based on electric power wireless private network mixes network deployment for wireless network technical advantage full play comes out, realizes long-range wireless communication's safety, solves the information security problem of electric power wireless private network and utilization public network data transmission in-process.

The utility model aims at realizing through the following technical scheme:

a safe communication system for hybrid networking of an electric wireless private network comprises a data acquisition terminal, a remote communication encryption module, an LTE communication module, a master station access device and a public network safe access platform, wherein the remote communication encryption module consists of an ARM processor, an encryption chip, the LTE communication module, a read-only memory and a power module; the data interface of the ARM processor is respectively connected with the data interfaces of the encryption chip, the LTE communication module and the read-only memory, and the power supply module provides electric energy required by the communication system; the data acquisition terminal acquires power multi-service data, the data is transmitted to a service master station through a power wireless private network dedicated data transmission channel, and the remote communication encryption module is responsible for encrypting and exchanging the data acquired by the data acquisition terminal module; and part of the electric power service data is transmitted to the service master station through the public network security access platform, the wireless public network special data transmission channel and the master station access equipment, so that the security monitoring of remote wireless communication is realized.

In the safe communication system of the electric power wireless private network hybrid networking, the ARM processor selects LM3S1911-IQC50-A2T and is internally provided with a 32-Bit RISC core.

In the secure communication system for hybrid networking of the power wireless private network, the read-only memory is an electronic erasable rewritable read-only memory M95M 04-DR.

In the secure communication system for hybrid networking of the power wireless private network, the encryption chip selects the counterpart TF32a 09.

Advantageous effects

The utility model discloses fully combine public network frequency channel and electric power private network frequency channel and application for wireless network technology advantage full play comes out, realizes remote radio communication's safety, solves the information security problem of electric power wireless private network data transmission in-process. The utility model provides a data acquisition terminal gathers electric power many business data, and according to different electric power business characteristics, electric power business data passes to business main website system through the special data transmission passageway of electric power wireless private network. The remote communication encryption module is arranged in the special data transmission channel of the electric wireless private network and is responsible for encrypting data acquired by the data acquisition terminal module and realizing data exchange between the terminal equipment and the master station; and part of the power service can also be transmitted to the service master station system through the public network security access platform, the wireless public network special transmission channel and the master station access equipment. And safety monitoring of remote wireless communication is realized.

The utility model discloses circuit structure is tight, both can guarantee the quick transmission of data, can realize the safety monitoring again, has realized safe collection, transmission and the use of electric power business big data.

Drawings

The present invention will be described in further detail with reference to the accompanying drawings and examples.

FIG. 1 is a schematic block diagram of the system of the present invention;

FIG. 2 is a schematic diagram of the architecture of a telecommunications encryption module;

FIG. 3 is a schematic structural diagram of a public network security access platform;

fig. 4 is a schematic structural diagram of a master station access device;

in the drawings, the reference numerals denote: 1. data acquisition terminal, 2, telecommunication encryption module, 3, the business main website, 4, main website access device, 5, public network security access platform, 6, intrusion detection module, 7, ARM treater, 8, encryption chip, 9, LTE communication module, 10, read-only memory, 11, power module, 12, main website encryption and decryption module, 13, prevent hot wall module.

Detailed Description

The utility model provides a safe communication system comprises a service data acquisition terminal 1, and an LTE communication module 9 formed after the hybrid networking of LTE230 and LTE1.8G electric power wireless private networks; a remote communication encryption module 2; the LTE electric wireless public network security access platform comprises a main station access device 4 and a service main station 3. The service data acquisition terminal 1 is responsible for acquiring electric power multi-service data; the LTE communication module 9 formed by hybrid networking of the LTE230 and LTE1.8G power wireless private networks is responsible for data information exchange between the communication encryption module data and the service master station system. The data transmission channel special for the LTE electric wireless private network utilizes the remote communication encryption module to encrypt the data acquired by the data acquisition terminal and realize data exchange with the service master station. The master station access device 4 further encrypts data and transmits the data to the service master station 3, wherein the intrusion detection module 6 is responsible for discovering network intrusion behavior and cutting off the connection of an intruder.

Some important modules are described in further detail below.

1. Telecommunication encryption module

The remote communication encryption module 2 comprises an encryption chip 8, a serial port 1, a serial port 2, an LTE communication module, a power supply module, an ARM processor and an EEPROM electronic erasing type rewritable read-only memory; the encryption chip selects the same TF32A09, supports domestic encryption algorithms of SM1, SM2, SM3 and SM4 and international general algorithms DES and RSA, is connected with the ARM processor through an I2C interface, and realizes rapid data reading and transmission; the SPI bus is connected with the EEPROM and stores key data information; the power management chip provides stable power input for the whole system. The serial port 1 is connected with an acquisition terminal to acquire service data; the serial port 2 is connected with the LTE communication module and interacts with data of the base station; the ARM processor selects LM3S1911-IQC50-A2T, and a 32-Bit RISC core is arranged in the ARM processor; EEPROM selects M95M04-DR, accessible through SPI bus; the power management chip adopts an all-log AXP152 chip.

The data acquisition terminal transmits data to the ARM processor LM3S1911-IQC50-A2T through the serial port 1, the ARM processor starts to pack the data and calls the encryption chip to encrypt the data with the TF32A09, after encryption is completed, the data are re-packed and transmitted to the ARM chip through the I2C interface, and finally transmitted to the LTE communication module to be transmitted to the master station, uplink communication is finished, and downlink communication is opposite to the uplink communication.

2. Public network security access platform

The security access platform comprises a public network router, a firewall module and a security gateway. The public network router is responsible for router selection and packet forwarding. Firstly, making a decision of allowing or rejecting each received data packet to pass, and then further forwarding the data packet to a firewall module; the firewall module discovers and handles possible security risks, data transmission, etc. The public network router and the firewall module are combined to ensure the safety of computer network operation, and the illegal access information is audited to the accessed mobile terminal to ensure the access validity and strengthen the boundary safety together. The public network router and the firewall module both adopt dual-computer hot standby, when one of the two modules breaks down, the other one can take over the work of the other module quickly, and the service is guaranteed not to be interrupted. And the security gateway further performs identity authentication and data encryption, and establishes a secure communication channel with the data acquisition terminal through a public network.

When entering a security access platform, data acquired by a data acquisition terminal can pass through a firewall and a public network router, and the public network router is responsible for routing and grouping and forwarding to the firewall module; the firewall module further discovers and handles possible security risks, data transmission, etc. The public network router and the firewall module are combined to ensure the safety of computer network operation, and the illegal access information is audited for the accessed mobile terminal to ensure the access validity and strengthen the boundary safety together; the security gateway further performs identity authentication and data encryption, a built-in encryption module encrypts data sent to the service master station system by the data acquisition terminal, collected data are prevented from being tampered, and a secure communication channel is established with the data acquisition terminal through a public network. The public network router adopts FI-720, and the firewall adopts the model of the green alliance technology NFNH 3-G200H; the security gateway adopts a telecontrol communication security gateway HR TD-3000.

3. Master station access equipment

The master station access device 4 comprises a firewall module 13, an intrusion detection module 6 and a master station encryption and decryption module 12. The firewall module further realizes safety protection; the intrusion detection module 6 is responsible for discovering network intrusion behavior in time and cutting off the connection of an intruder; and the master station encryption and decryption module decrypts or encrypts the data transmitted through the public network transmission dedicated channel.

The data transmitted by the main station access equipment through the public network special data transmission channel can pass through the firewall module, the intrusion detection module and the main station encryption and decryption module. The firewall module east soft NetEye FW5120-RI-MI further realizes safety protection; the intrusion detection module 6 can adopt the green alliance science and technology NIPSNX3-N1000A and is responsible for discovering network intrusion behaviors in time and cutting off the connection of an intruder; master encryption/decryption module TF32a09 decrypts data transmitted via the public network transport private channel. And after the data is confirmed to be safe, the data is continuously transmitted to the service master station system.

Claims (4)

1. The safe communication system for the hybrid networking of the electric wireless private network is characterized by comprising a data acquisition terminal (1), a remote communication encryption module (2), an LTE communication module, a master station access device (4) and a public network safe access platform (5), wherein the remote communication encryption module (2) consists of an ARM processor (7), an encryption chip (8), an LTE communication module (9), a read-only memory (10) and a power supply module (11); the data interface of the ARM processor (7) is respectively connected with the data interfaces of the encryption chip (8), the LTE communication module (9) and the read-only memory (10), and the power supply module (11) provides electric energy required by a communication system; the data acquisition terminal (1) acquires electric power multi-service data, the data are transmitted to the service master station (3) through a special data transmission channel of the electric power wireless private network, and the remote communication encryption module (2) is responsible for encrypting and exchanging the data acquired by the data acquisition terminal module; and part of the electric power service data is transmitted to the service master station through the public network security access platform (5), the wireless public network special data transmission channel and the master station access equipment (4), so that the security monitoring of remote wireless communication is realized.

2. The secure communication system of hybrid networking for wireless private networks according to claim 1, wherein the ARM processor is selected from LM3S1911-IQC50-A2T and has a 32-Bit RISC core therein.

3. The secure communication system of the hybrid networking of the wireless power private network as claimed in claim 1, wherein the ROM (10) is an EEPROM M95M 04-DR.

4. The secure communication system of hybrid networking of wireless power private network according to claim 1, wherein the encryption chip (8) selects the counterpart TF32A 09.

Images