KR20140042361A - Power security information model and method for building up using the same - Google Patents

Power security information model and method for building up using the same Download PDF

Info

Publication number
KR20140042361A
KR20140042361A KR1020120109055A KR20120109055A KR20140042361A KR 20140042361 A KR20140042361 A KR 20140042361A KR 1020120109055 A KR1020120109055 A KR 1020120109055A KR 20120109055 A KR20120109055 A KR 20120109055A KR 20140042361 A KR20140042361 A KR 20140042361A
Authority
KR
South Korea
Prior art keywords
class
information model
relationship
security
power
Prior art date
Application number
KR1020120109055A
Other languages
Korean (ko)
Inventor
김충효
임유석
최문석
주성호
임용훈
백종목
윤현진
Original Assignee
한국전력공사
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 한국전력공사 filed Critical 한국전력공사
Priority to KR1020120109055A priority Critical patent/KR20140042361A/en
Publication of KR20140042361A publication Critical patent/KR20140042361A/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
    • G06Q50/06—Energy or water supply
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/105—Multiple levels of security

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • Economics (AREA)
  • Public Health (AREA)
  • Water Supply & Treatment (AREA)
  • General Health & Medical Sciences (AREA)
  • Human Resources & Organizations (AREA)
  • Marketing (AREA)
  • Primary Health Care (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Remote Monitoring And Control Of Power-Distribution Networks (AREA)

Abstract

The present invention relates to a power security information model and a method for building the same, comprising: a class definition unit for generating and defining a security information related class based on a general information model applied to a power management system; A class relationship defining unit defining a relationship between the defined classes; An association definition unit defining an association relationship between the defined classes and classes of the general information model; And a data communication unit performing data interchange with the general information model.

Description

Power security information model and how to build it {POWER SECURITY INFORMATION MODEL AND METHOD FOR BUILDING UP USING THE SAME}

The present invention provides a power security information model and a method for constructing the general information to classify a standard security object into an expandable Unified Modeling Language (UML) hierarchy based on a general information model to present a power security information model that conforms to the standard. Provides an information model for extended power security in the model and how to build it.

With the recent deregulation of power systems and the introduction of smart grids, various applications are applied. However, since there is no information model for data exchange between applications, 1: 1 format conversion is essential for information exchange between specific applications. Therefore, as shown in Fig. 1, the interface of the power system with various applications has a complicated structure. The bigger problem is that the number of interfaces according to the number of applications (n) is exponentially increased to nC2.

In order to solve this problem, conventionally proposed a Common Information Model (CIM) as disclosed in Korean Patent Laid-Open Publication No. 2007-0070795. The advantages of this model are to facilitate the exchange of power system (application) network information between utilities, increase the consistency and interface efficiency of information exchange between applications within the utility, and exchange market information between utilities.

This general information model largely includes power information for transmission, distribution, and power markets. Since the structure for security information is not supported inside, security information that is not incorporated in the general information model is provided through separate communication devices and systems. It should be delivered to the power management system (EMS). However, the additional interface and cost incurred in this process, there was a problem contrary to the general information model in pursuit of improved reliability through a simple system configuration.

The present invention has been invented to solve the above problems, by classifying a standard security object into an expandable Unified Modeling Language (UML) hierarchy based on a general information model, by presenting a power security information model that conforms to the standard, The purpose of the present invention is to provide an information model for power security that supports interoperability among utilities and a method of building the same.

In addition, the present invention proposes a power security information model that improves the security and efficiency of the power management system by providing an optimized power security information model without affecting the structure of the existing general information model, and to build it The purpose is to provide a method.

In order to achieve the above object, the power security information model according to an embodiment of the present invention, based on the general information model applied to the power management system, class definition unit for generating and defining the security information related classes; A class relationship defining unit defining a relationship between the defined classes; An association definition unit for defining a relationship between the defined classes and a class of the general information model, and exchanging data; And a data communication unit performing data interchange with the general information model.

The class definition unit may identify a hierarchical structure through UML of the general information model and generate a class related to security information based on a smart distribution network system (NSM).

The class definition unit may include a first class for forming a layer structure of the power security information model and a second class that is a class generated by reinterpreting the class of the general information model to accommodate security information, and the existing general information. And generating a third class to hold the class of the model.

The first class may be defined as a communication device class, a security device class, and an intelligent device (IED) class.

The class relationship definition unit may define a relationship between classes in a relationship including any one of inheritance, association, set, and configuration.

In addition, the class relationship definition unit, the lower class inherits even the relationship of the upper class, it characterized in that the lower class also retains security information inherited from the upper class.

In addition, the association definition unit, among the conditions of inheriting from the upper class that can cover the top-level class, the condition of maintaining a hierarchical horizontal relationship with other classes inheriting the upper class, among the classes of the existing general information model The class reused in the information security model for power security is characterized by defining associations based on conditions that maintain existing relationships.

In order to achieve the above object by the power security information model class definition unit according to an embodiment of the present invention. Identifying a hierarchical structure of a general information model applied to a power management system; Generating and defining, by the class definition unit, a security information related class based on a general information model applied to a power management system; Defining, by the class relationship definition unit, relationships between the defined classes; Defining, by the association definition unit, an association between the defined classes and a class of the general information model; And performing data interchange with the general information model by a data communication unit.

In addition, the step of creating and defining the security information related class, grasping the hierarchical structure through the UML of the general information model, and forming a layer structure of the power security information model based on the smart distribution network system (NSM) A second class, which is a class generated by reinterpreting the class of the general information model and a third class that maintains the class of the existing general information model, is generated to accommodate the first class and security information.

In the defining of the relationship between the defined classes, the class relationship defining unit may define a relationship between classes in a relationship including any one of inheritance, association, set, and configuration.

The defining of the associative relationship may include: a condition inheriting from an upper class that may cover the top class, and a condition maintaining a horizontal relationship hierarchically with other classes inheriting the upper class; The class reused in the power security information model among the classes of is characterized by defining an association on the basis of maintaining the existing relationship.

The power security information model and the method of constructing the same according to the present invention having the above-described configuration classify a standard security object into an expandable Unified Modeling Language (UML) hierarchy based on a general information model for power security that conforms to the standard. By presenting an information model, it is effective to support interoperability between utilities.

In addition, the present invention has the effect of improving the security and efficiency of the power management system by providing an optimized power security information model without affecting the structure of the existing general information model.

1 is a diagram illustrating a structure of an integrated power control network in which a power security information model is extended to a general information model according to an embodiment of the present invention.
2 is a view showing the structure of the power security information model according to an embodiment of the present invention.
3 is a diagram illustrating a hierarchical structure of a power security information model according to an embodiment of the present invention.
4 is a diagram illustrating a hierarchical structure based on an association relationship between a general information model and a power security information model according to an embodiment of the present invention.
5 is a flowchart illustrating a method of building a power security information model in a general information model according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings in order to facilitate a person skilled in the art to easily carry out the technical idea of the present invention. . First, in adding reference numerals to the constituents of the drawings, it is to be noted that the same constituents are denoted by the same reference symbols as possible even if they are displayed on different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

Hereinafter, a power security information model and a method of constructing the same according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view showing the structure of an integrated power control network that extends the power security information model to the general information model according to an embodiment of the present invention, Figure 2 is a structure of the power security information model according to an embodiment of the present invention 3 is a diagram illustrating a hierarchical structure of a power security information model according to an embodiment of the present invention, and FIG. 4 is a relation between a general information model and a power security information model according to an embodiment of the present invention. It is a figure which shows the hierarchical structure which follows.

Referring to FIG. 1, the integrated power control network 100 extending the power security information model to the general information model according to the present invention extends the power security model 110 to the existing general information model 101. With this structure, the general information model 101 may transmit power management system 200 and applications as well as security information as well as existing power information.

As shown in FIG. 2, the power security information model 110 includes a security class definition unit 130, a class relationship definition unit 140, an association relationship definition unit 150, and a data communication unit 160.

The security class definition unit 130 grasps the hierarchical structure of the general information model 101 through UML and defines a class generated in the power security information model 110.

In the hierarchical structure of the general information model 101, the IEC standard including the power information becomes the best layer, and the package composed of a set of similar classes for each standard becomes the lower layer. In a package, dozens of classes typically associate with other classes, and the class contains attributes with detailed data types.

Therefore, the class to be generated in the power security information model 110 may be formed of a security information class based on the general information model 101 because all the power information can be exchanged. Accordingly, the class generated in the power security information model 110 is based on NSM (Network System Management) of IEC 62351-7, which is aimed at applying security in the power and smart grid fields. Among the NSMs, objects that can be utilized as security information while being used for power system operation are classified into an operation state class 137, and objects which generate an alarm exceeding a predetermined value are classified into an alarm class 138. Also, objects representing a predetermined value such as a network configuration, a backup device, and a normal operating range are classified into a configuration class 139, and objects representing a device to be controlled and objects representing a control result are classified into a control class 136. Finally, the communication device class 133, which will be the top class of the low power security information model 110, includes objects that store log values or detect changes in the device in operation.

As shown in FIG. 3, the security class definition unit 130 is a first class 131 that is a newly generated class for forming a hierarchical structure of the power security information model based on the classes of the NSM classified as described above. The second class 135, which is a class that is reinterpreted to receive the information, and the class of the existing general information model 101, generates a third class 10, which is a class that is reused in the power security information model 110. do.

The first class 131 is a communication equipment class 133 for generating and managing security information in a power system, a security equipment class 132 for viewing such communication equipment from a security perspective, and an recently introduced intelligent equipment (IED) class. The class that is the basis of the power security information model 110, which is defined as 134, becomes the highest class as the communication equipment class 133, and the security equipment class 132 and the intelligent equipment class 134 communicate with each other. Become a subclass of equipment class 133. Accordingly, the security device class 132 and the intelligent device class 134 inherit all the attributes of the communication device class 133 in defining the relationship.

Here, the communication device class 133 may manage all security information classified into the security device class 132 and the intelligent device class 134. However, because of the wide range and scope of security information during actual power system operation, the communication equipment class 133 can be selectively managed without having to manage all the information.

The class relationship defining unit 140 defines a relationship between the previously generated classes. The class relationship defining unit 140 selectively determines whether to hold security information among four relationships supported by UML, that is, inheritance, association, set, and configuration, and defines an association between classes to define an existing general information model ( 101) allows to have a horizontal UML structure similar to the structure. As shown in Figs. 3 and 4, the? Mark means inheritance and-means an association.

 Since the lower class inherits all the associations of the upper class, the security device class 132 and the intelligent device class 134 inherited from the communication device class 133 are included in the second class 135 that manages the security information. The security classes of the operating classes 137, the alarm class 138, the environment setting class 139, and the control class 136 may be held.

 The association definition unit 150 defines an association between the class of the power security information model 110 defined above and the existing general information model 101 so that mutual security information can be exchanged freely.

Association formation in the power security information model 110 is formed by inheriting or defining an association with the communication equipment class 133, which is the highest class. Therefore, when the communication device class 133 forms an association with the general information model 101, lower classes inheriting the communication device class may freely exchange data with the general information model 101. As described above, in forming an association between the power security information model 110 and the general information model 101, three conditions may be presented in order to form an optimal association with the highest class. First, the condition that it inherits from the parent class that can cover the top class, and second, the condition that it maintains a hierarchical horizontal relationship with other classes that inherit the parent class. Third, the power of the existing general information model Classes reused in the information model for security present the condition that they retain their existing relationships.

Based on this, FIG. 4 illustrates a hierarchical structure according to an association that satisfies a given condition. The communication device class, which is the highest class, inherits the device class 13 of the general information model 101, and the device class 13 Is also related to the inherited identification object class 11 and the resource information class 12, and other classes that inherit the equipment class 13, that is, the challenge equipment class 14, the composite switch class 15, and the auxiliary equipment class. (16), the building unit class 17, the conversion class 18, the protective equipment class 19 can maintain a horizontal relationship. In addition, the security equipment class 132 and the intelligent equipment class 134 inherited from the communication equipment class 133 may also be related to these classes. The communication equipment class 133 is associated with an operating state class 137, an alarm class 138, an environment setting class 139, and a control class 136, and the control class 126 is a general information model 101. Since the content of is reused as it is, the relationship between the set value class 20 and the request class 21 is also maintained.

The data communication unit 160 performs data communication between the power security information model and the general information model configured as described above.

5 is a flowchart illustrating a method of building a power security information model in a general information model according to an embodiment of the present invention.

First, the structure of the general information model is identified (S100).

Next, a class in the power security information model is created and defined. (S200) A first class 131, which is a newly created class for forming a hierarchical structure based on the classes of the NSM, is reinterpreted to accommodate security information. A third class 10, which is a class that is reused in the power security information model 110, is generated as a class of the generated second class 135 and the existing general information model 101. In this case, the first class 131 is a communication device class 133 for generating and managing security information in a power system, a security device class 132 for viewing such communication devices from a security point of view, and recently introduced intelligent equipment (IED). Class 134). At this time, the communication equipment class 133 is classified into a top class, and the security equipment class and intelligent equipment class are classified into subclasses.

Next, the relationships between the defined classes are defined (S300). That is, the relationships between the previously generated classes are defined. The security device class 132 and the intelligent device class 134, which are inherited from the highest level of communication device class 133, define four types of relationships among inheritance, association, set, and configuration supported by UML. ) May also hold security information of the class included in the second class 135 managing the security information.

Finally, an association relationship between the class of the general information model and the class of the power security information model is defined (S400) between the classes of the power security information model 110 defined above and the classes of the general information model 101. By defining the relationship between the two, the security information can be exchanged freely.

As described above, the present invention relates to a power security information model and a method of constructing the same, and classifies a standard security object into a scalable UML (Unified Modeling Language) hierarchy based on a general information model. By presenting, interoperability between utilities can be supported.

In addition, the present invention can improve the security and efficiency of the power management system by presenting an optimized power security information model without affecting the structure of the existing general information model.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is evident that many alternatives, modifications, and variations will be apparent to those skilled in the art without departing from the scope of the appended claims. As will be understood by those skilled in the art.

110: information security model
120: class definition unit
130: class relationship definition unit
140: Association definition part

Claims (11)

A class definition unit for generating and defining a security information related class based on a general information model applied to a power management system;
A class relationship defining unit defining a relationship between the defined classes;
An association definition unit defining an association relationship between the defined classes and classes of the general information model; And
A data communication unit for performing data interchange with the general information model;
Information security model for power comprising a. The method according to claim 1,
The class definition unit,
The information security model for power security, characterized in that the hierarchical structure is identified through the UML of the general information model, and a security information related class is generated based on a smart power distribution network system (NSM). The method according to claim 1,
The class definition unit,
A first class for forming a hierarchical structure of the power security information model and a second class that is a class generated by reinterpreting the class of the general information model to accommodate security information and a class of the existing general information model An information model for power security, characterized by generating three classes. The method of claim 3,
The first class is a power security information model, characterized in that the communication device class, which is the highest class for generating and managing security information, security equipment class and intelligent equipment (IED) class. The method according to claim 1,
The class relationship definition unit defines a relationship between classes in a relationship including any one of inheritance, association, aggregation, and configuration. The method according to claim 1,
The class relationship definition unit, the lower class inherits even the relationship of the upper class, power security information model, characterized in that also retains the security information inherited from the upper class. The method according to claim 1,
The association definition unit is a condition that inherits from a parent class that can cover the top class, maintains a hierarchical horizontal relationship with other classes that inherit the parent class, power security among classes of the existing general information model. The class reused in the utility information model defines an association based on a condition that maintains an existing relationship. By class definition. Identifying a hierarchical structure of a general information model applied to a power management system;
Generating and defining, by the class definition unit, a security information related class based on a general information model applied to a power management system;
Defining, by the class relationship definition unit, relationships between the defined classes;
Defining, by the association definition unit, an association between the defined classes and the classes of the general information model; And
Performing data interchange with the general information model by a data communication unit;
Power security information model building method comprising a. 9. The method of claim 8,
Creating and defining the security information related class,
Determine the hierarchical structure through the UML of the general information model, and to receive the first class and security information for forming the hierarchical structure of the power security information model based on the smart power distribution network system (NSM) And generating a third class that maintains a second class, which is a class generated by reinterpreting the class, and a class of an existing general information model. 9. The method of claim 8,
Defining a relationship between the defined classes,
And the class relationship definition unit defines a relationship between classes in a relationship including any one of inheritance, association, aggregation, and configuration. 9. The method of claim 8,
Defining the association,
Conditions that inherit from a parent class that can encompass the top-level class, maintain hierarchical horizontal relationships with other classes that inherit the parent class, and are reused in the information security model of the existing general information model. A class defines an association based on a condition of maintaining an existing relationship.


KR1020120109055A 2012-09-28 2012-09-28 Power security information model and method for building up using the same KR20140042361A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
KR1020120109055A KR20140042361A (en) 2012-09-28 2012-09-28 Power security information model and method for building up using the same

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
KR1020120109055A KR20140042361A (en) 2012-09-28 2012-09-28 Power security information model and method for building up using the same

Publications (1)

Publication Number Publication Date
KR20140042361A true KR20140042361A (en) 2014-04-07

Family

ID=50651568

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020120109055A KR20140042361A (en) 2012-09-28 2012-09-28 Power security information model and method for building up using the same

Country Status (1)

Country Link
KR (1) KR20140042361A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016018008A1 (en) * 2014-07-30 2016-02-04 한국전력공사 Device and method for calculating stability and predicting error of power system network
KR101664701B1 (en) * 2015-06-12 2016-10-11 한국전력공사 Apparatus and method for verifying validity of cim-xml file

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016018008A1 (en) * 2014-07-30 2016-02-04 한국전력공사 Device and method for calculating stability and predicting error of power system network
US10394975B2 (en) 2014-07-30 2019-08-27 Korea Electric Power Corporation Device and method for calculating stability and predicting error of power system network
KR101664701B1 (en) * 2015-06-12 2016-10-11 한국전력공사 Apparatus and method for verifying validity of cim-xml file

Similar Documents

Publication Publication Date Title
Cavalieri et al. Integration of IEC 61850 SCL and OPC UA to improve interoperability in Smart Grid environment
CN103460184B (en) System and method for being monitored in conjunction with generic data model repository and managing data center resource
Ning et al. Future internet of things architecture: like mankind neural system or social organization framework?
Lee et al. Model transformation between OPC UA and UML
US9727667B2 (en) Generating a three dimensional building management system
CN107046530A (en) Coordination governing system for the quick information technology environment of isomery
US8782597B2 (en) Ontology updating apparatus, method and system
WO2015176563A1 (en) Unified modeling method using generalized measurement transverse correlation mode
CN104616207A (en) Power grid topological visualization system and power grid topological visualization method
WO2013185166A1 (en) System management tool
KR101397380B1 (en) System for integrating meta-modeling
Lee et al. Harmonizing IEC 61850 and CIM for connectivity of substation automation
Privat et al. Towards a shared software infrastructure for smart homes, smart buildings and smart cities
CN103500094A (en) Service platform monitoring model capable of supporting user visible user-definition
CN106406854A (en) Computer monitoring configuration interface design method and system
KR101397381B1 (en) Method for integrating meta-modeling
CN113852204B (en) Transformer substation three-dimensional panoramic monitoring system and method based on digital twinning
CN103186620A (en) CIM mapping method
CN106127401B (en) Enterprise information system modeling method and device
CN103761077A (en) Method for mapping and modeling from CIM (Common Information Model) to relational database
CN105046387A (en) Comprehensive analyzing subsystem of digital city monitoring center and working method thereof
KR20140042361A (en) Power security information model and method for building up using the same
US20120254436A1 (en) Integration of an application server and data grid
CN103294878A (en) Unified modeling method of multidimensional grid models based on DMS (database management system)
Ishankhodjayev et al. Improvement of information support in intelligent information energy systems

Legal Events

Date Code Title Description
WITN Withdrawal due to no request for examination