WO2024037328A1 - 核电厂工业控制系统网络安全的全局数据控制方法和装置 - Google Patents

核电厂工业控制系统网络安全的全局数据控制方法和装置 Download PDF

Info

Publication number
WO2024037328A1
WO2024037328A1 PCT/CN2023/110486 CN2023110486W WO2024037328A1 WO 2024037328 A1 WO2024037328 A1 WO 2024037328A1 CN 2023110486 W CN2023110486 W CN 2023110486W WO 2024037328 A1 WO2024037328 A1 WO 2024037328A1
Authority
WO
WIPO (PCT)
Prior art keywords
nuclear power
data
power plant
isolation device
cluster
Prior art date
Application number
PCT/CN2023/110486
Other languages
English (en)
French (fr)
Inventor
颜振宇
李磊
王碧瑶
黄勇成
张龙强
徐良军
赵岩峰
习楚浩
Original Assignee
中广核工程有限公司
深圳中广核工程设计有限公司
中国广核集团有限公司
中国广核电力股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中广核工程有限公司, 深圳中广核工程设计有限公司, 中国广核集团有限公司, 中国广核电力股份有限公司 filed Critical 中广核工程有限公司
Publication of WO2024037328A1 publication Critical patent/WO2024037328A1/zh

Links

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Programme-control systems
    • G05B19/02—Programme-control systems electric
    • G05B19/418—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/4183—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by data acquisition, e.g. workpiece identification
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/30—Nc systems
    • G05B2219/32—Operator till task planning
    • G05B2219/32252—Scheduling production, machining, job shop

Definitions

  • the present application relates to the field of computer technology, and in particular to a global data control method and device for network security of a nuclear power plant industrial control system.
  • nuclear energy is not only more environmentally friendly, but also can provide a larger amount of energy. Therefore, nuclear energy will definitely become the main force of future energy supply.
  • nuclear power plants not only have to undertake the automatic control function of power production, but also At the same time, it must also undertake the core function of nuclear security.
  • network security threats have been brought to the industrial control systems of nuclear power plants, affecting the network security and nuclear safety of nuclear power plants. Therefore, how to centrally manage and control the network security of all industrial control systems in nuclear power plants and how to respond to network security threats have become issues that need to be solved urgently.
  • this application provides a global data control method for network security of a nuclear power plant industrial control system.
  • the method includes:
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters
  • control side isolation device Through the control side isolation device, global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant.
  • the operation data of at least two nuclear power industrial control system clusters is obtained through the system cluster port side isolation device, including:
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined based on the similarity of the safety levels of the adjacent nuclear power plant system clusters; and the similarity of the safety level is one-way with the data of the cluster space isolation device.
  • Transmission isolation capability is inversely proportional.
  • the global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant through the control side isolation device, including:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence; among them, the first control side isolation device is located in the production area within the jurisdiction of the nuclear power plant. Between the area and the office area, the second control side isolation device is located between the office area within the jurisdiction of the nuclear power plant and the jurisdiction area outside the nuclear power plant, and the one-way data transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device. Side isolation device.
  • global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence, including:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the first-level nuclear power management equipment in the area outside the nuclear power plant through the first control-side isolation device and the second control-side isolation device in sequence, so that the first-level nuclear power management equipment passes
  • the first control-side isolation device transmits global control data to the second-level nuclear power management equipment in the jurisdiction outside the nuclear power plant.
  • each nuclear power industrial control system cluster includes: at least two nuclear power industrial control systems and data aggregation equipment, and each nuclear power industrial control system transmits locally generated operating data to the data aggregation device through a system data isolation device. equipment;
  • the operating data of at least two nuclear power industrial control system clusters are obtained through the isolation device on the system cluster port side, including:
  • the operation data of each nuclear power industrial control system cluster is obtained from the data aggregation equipment of each nuclear power industrial control system cluster.
  • the nuclear power management server cluster includes: data storage server, data analysis server, data interface server, terminal security server, virus and patch server, emergency platform server, account management server and threat intelligence server. At least one.
  • this application also provides a global data control device for network security of a nuclear power plant industrial control system.
  • Devices include:
  • the management data acquisition module is used to obtain the nuclear power management data of the nuclear power management server cluster;
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system;
  • the operation data acquisition module is used to obtain the operation data of at least two nuclear power industrial control system clusters through the isolation device on the system cluster port side; wherein, cluster space isolation devices are configured between adjacent nuclear power plant system clusters;
  • the global data determination module is used to process operating data and nuclear power management data to obtain global control data of the nuclear power plant;
  • the data transmission module is used to transmit global control data from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant through the control side isolation device.
  • this application also provides a central control device.
  • the central control device includes a memory and a processor.
  • the memory stores computer programs.
  • the processor executes the computer program, it implements the following steps:
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters
  • control side isolation device Through the control side isolation device, global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant.
  • this application also provides a computer-readable storage medium.
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters
  • control side isolation device Through the control side isolation device, global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant.
  • this application also provides a global data control system for network security of a nuclear power plant industrial control system.
  • the system includes: central control equipment, a nuclear power management server cluster, at least two nuclear power industrial control system clusters, a cluster space isolation device located between adjacent nuclear power plant system clusters, a system cluster port side isolation device for each nuclear power plant system cluster; and a control side isolation device;
  • the nuclear power management server cluster is used to store nuclear power management data;
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system;
  • Each nuclear power industrial control system cluster is used to store the operation data of each nuclear power industrial control system cluster
  • the central control device is used to execute the steps of the global data control method for nuclear power plant industrial control system network security described in any of the above embodiments.
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is isolated from the one-way data transmission of the system cluster port side isolation device. Strength is directly proportional to ability.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined based on the similarity of the safety levels of the adjacent nuclear power plant system clusters; and the similarity of the safety level is one-way with the data of the cluster space isolation device.
  • Transmission isolation capability is inversely proportional.
  • control side isolation device includes a first control side isolation device located between the production area and the office area of the nuclear power plant's internal jurisdiction, and a first control side isolation device located between the nuclear power plant's internal jurisdiction and the nuclear power plant's external jurisdiction.
  • the second control side isolation device, and the data one-way transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.
  • Figure 1 is an application environment diagram of the global data control method for network security of the nuclear power plant industrial control system in one embodiment
  • Figure 2 is a schematic flow chart of a global data control method for network security of a nuclear power plant industrial control system in one embodiment
  • Figure 3 is a schematic diagram of a nuclear power management service cluster in an embodiment
  • Figure 4 is a schematic diagram of partitions of different nuclear power industrial control system clusters in one embodiment
  • Figure 5 is a schematic diagram of the acquisition principle of operating data of the nuclear power industrial control system cluster and management data of the nuclear power management service cluster in one embodiment
  • Figure 6 is a schematic diagram of the acquisition principle of operating data of the nuclear power industrial control system cluster in one embodiment
  • Figure 7 is a schematic diagram of the principle of transmitting data from a nuclear power plant to a superior unit in one embodiment
  • Figure 8 is a schematic flow chart of a global data control method for network security of a nuclear power plant industrial control system in another embodiment
  • Figure 9 is a schematic structural diagram of the entire nuclear power plant in one embodiment
  • Figure 10 is a structural block diagram of a global data control device for network security of a nuclear power plant industrial control system in one embodiment
  • Figure 11 is an internal structure diagram of the central control device in one embodiment.
  • a central control device is provided.
  • the central control device may be a server, and its internal structure diagram may be as shown in Figure 1 .
  • the central control device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the central control device is used to provide computing and control capabilities.
  • the memory of the central control device includes non-volatile storage media and internal memory.
  • the non-volatile storage medium stores operating systems, computer programs and databases. This internal memory provides an environment for the execution of operating systems and computer programs in non-volatile storage media.
  • the database of the central control equipment is used to store data required for global data control processing of nuclear power plant industrial control system network security.
  • the network interface of the central control device is used to communicate with external terminals through network connections.
  • a global data control method for network security of a nuclear power plant industrial control system is provided.
  • the application of this method to the central control equipment in Figure 1 is used as an example to illustrate, including the following steps:
  • the nuclear power management data includes network security data of the industrial control system of the nuclear power plant.
  • the nuclear power management server cluster includes multiple nuclear power management servers.
  • Each nuclear power management server can provide or store network security data of the nuclear power plant industrial control system.
  • the nuclear power management server can include, data storage servers, data Analysis server, data interface server, terminal security server, anti-virus and patch server, emergency platform server, account management server and threat intelligence server, etc.
  • the data storage server is used to store all data in the entire factory, including the data of each server and the data processing process.
  • the processing results include attacks encountered, attack processes, prevention and control methods, personnel operation records, etc. All data;
  • the data analysis server is used to deduplicate, clean, classify, fill and fill all relevant data centrally controlled by the nuclear power plant through data analysis methods such as data statistics, data association, data modeling and artificial intelligence. Labeling, normalization, etc. are processed, and the data is classified and stored;
  • the data interface server is mainly responsible for connecting with external and superior units.
  • the global data control system of the network security of the nuclear power plant industrial control system is used for network security supervision by relevant national departments.
  • the generated reports include but are not limited to safety Events, alarm classifications, key network security events, and industrial control system operating events; the terminal security server is used to guide security operation and maintenance personnel to rectify the system based on events that occur throughout the factory; the anti-virus and patch server is used to apply patches after discovering viruses Repair the virus, and record and prevent the virus; the emergency platform server is used to formulate emergency plans and send them to the central control equipment of the global data control system of the nuclear power plant industrial control system network security, which is controlled by the central control equipment according to the security Event level, call the preset event push rules, and push the security event level to the plant-wide network security emergency response and management platform in real time, so that the plant-wide network security emergency response and management platform can execute the emergency plan based on the security event level; account
  • the management terminal is used to manage user accounts, including security management, and the authority levels of each user; the threat intelligence
  • each nuclear power management server and central control equipment in the cluster are connected to a core network of a plant-wide industrial control system security management center.
  • Network security data of the nuclear power plant industrial control system of the nuclear power management server cluster can be obtained through the core network.
  • S202 Obtain operating data of at least two nuclear power industrial control system clusters through the system cluster port side isolation device.
  • the nuclear power industrial control system cluster may be a cluster composed of nuclear power industrial control systems with similar safety levels, which may include multiple nuclear power industrial control systems.
  • the number of nuclear power industrial control system clusters in this embodiment is at least two, and cluster space isolation devices are configured between adjacent nuclear power industrial control system clusters.
  • the cluster space isolation device is used to isolate adjacent nuclear power industrial control system clusters to prevent the data of adjacent nuclear power industrial control system clusters from flowing to each other. In this way, even if a nuclear power industrial control system cluster is attacked by a network, its adjacent nuclear power industry The control system cluster will also not be affected by the attack.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters can be configured according to the adjacent nuclear power plant system clusters.
  • the similarity of the security level of the system cluster is determined; and the similarity of the security level is inversely proportional to the one-way data transmission isolation capability of the cluster space isolation device.
  • the security level corresponding to each nuclear power industrial control system cluster can be determined based on the importance of each nuclear power industrial control system cluster in the entire plant. If the security levels of two adjacent nuclear power industrial control system clusters are the same or similar, then this is Two adjacent nuclear power industrial control system clusters are equipped with cluster space isolation devices (such as logical isolation devices) with low one-way transmission capabilities to save costs.
  • a cluster space isolation device with higher one-way transmission capacity should be installed for the two adjacent nuclear power industrial control system clusters. isolation device) to ensure maximum safety.
  • a system cluster port-side isolation device with lower one-way data transmission isolation capability can be used.
  • the system cluster port side isolation device can be a device used to isolate the direction of data transmission between the nuclear power industrial control system cluster and the central control equipment. That is, the operating data of the nuclear power industrial control system cluster can be transmitted to the central control equipment, but the operation data in the central control equipment Data cannot be transmitted back to the nuclear power industry control system cluster.
  • all nuclear power industrial control system clusters may correspond to the same system cluster port-side isolation device, or each nuclear power industrial control system cluster may correspond to a system cluster port-side isolation device.
  • the stronger the one-way transmission capability of the isolation device the higher its cost.
  • it is preferable to configure an exclusive system cluster port side isolation device for each nuclear power industrial control system cluster where , The system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.
  • the nuclear power industrial control system cluster corresponds to a public system cluster port-side isolation device
  • the public system cluster port-side isolation device can be used to interact with each nuclear power industrial control system cluster. , to obtain the operation data of each nuclear power industrial control system cluster; if the nuclear power industrial control system cluster corresponds to its own separate system cluster port-side isolation device, then the respective system cluster port-side isolation device can be used to communicate with each nuclear power industrial control system at this time.
  • System clusters interact to obtain operating data of each nuclear power industrial control system cluster.
  • S203 Process the operation data and nuclear power management data to obtain global control data of the nuclear power plant.
  • the obtained nuclear power management data of the nuclear power management server cluster and the operation data of the nuclear power industrial control system cluster are sent to the nuclear power plant industrial control system network security through the core network of the whole plant industrial control system security management center.
  • the central control equipment of the global data control system is summarized to obtain the global control data of the nuclear power plant.
  • the central control equipment can also perform related processing on the received operation data and nuclear power management data, such as situation display, monitoring and early warning, safety operation and maintenance, information sharing, asset management and safety analysis, emergency response, and external interfaces. , system management, system security management, audit management, own security requirements, data processing, data analysis, etc., and the processing results are also used as global control data.
  • control side isolation device is used to separate the jurisdiction area inside the nuclear power plant from the jurisdiction area outside the nuclear power plant. Since the security outside the jurisdiction area of the nuclear power plant is lower, it is more vulnerable to security attacks than the jurisdiction area inside the nuclear power plant.
  • the control side isolation device can protect the internal jurisdiction of the nuclear power plant from the threat of attack when the jurisdiction outside the nuclear power plant is attacked, which greatly ensures the safety of the jurisdiction within the nuclear power plant.
  • the jurisdiction area within the nuclear power plant is all areas within the nuclear power plant, including the areas where the nuclear power management server cluster, the nuclear power industrial control system cluster, and the central control equipment of the global data control system of the nuclear power plant industrial control system network security are located.
  • Jurisdictional areas outside the nuclear power plant are areas other than the internal jurisdiction of the nuclear power plant. For example, they may include areas where the first-level nuclear power management equipment and the second-level nuclear power management equipment are located.
  • the global control data can be transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant based on optical signal transmission through the control side isolation device.
  • it can be transmitted to the first-level nuclear power management equipment and the second-level nuclear power management equipment in jurisdictions outside the nuclear power plant.
  • the above embodiment obtains nuclear power management data from each server, as well as operation data obtained from at least two nuclear power industrial control system clusters, and centrally manages and processes the obtained data to obtain global control data of the nuclear power plant, thereby realizing Mastery of plant-wide data.
  • a system cluster port side isolation device is introduced, thereby realizing one-way transmission of operation data and avoiding confusion of the operation data of the nuclear power industrial control system cluster, and Cluster space isolation devices are configured between adjacent nuclear power plant system clusters to ensure the independence between different nuclear power plant system clusters. Even if a certain area is subject to a security threat, it will not bring danger to adjacent areas to the maximum extent. to ensure the safety of nuclear power plants.
  • each nuclear power industrial control system cluster in this embodiment may include: at least two nuclear power industrial control systems and data aggregation equipment, and each nuclear power industrial control system transmits locally generated operating data to Data aggregation equipment; correspondingly, obtaining the operation data of at least two nuclear power industrial control system clusters through the system cluster port side isolation device, including: obtaining data aggregation equipment from each nuclear power industrial control system cluster through the system cluster port side isolation device Obtain the operation data of each nuclear power industrial control system cluster.
  • the data summary device may be the operating data of each nuclear power industrial control system in the nuclear power industrial control system cluster where it is located.
  • each nuclear power industrial control system is regarded as a nuclear power industrial control system cluster.
  • the area corresponding to the nuclear power industrial control system with a higher safety level can be regarded as safety zone 1
  • the area corresponding to the nuclear power industrial control system with medium safety level can be regarded as safety zone 2.
  • the area corresponding to the nuclear power industrial control system with a lower safety level is used as a production management area, etc.
  • each nuclear power industrial control system collects its own operating data, including the original full traffic of the network, host logs, security equipment logs (its own logs and audit records), network equipment and other logs, Security policies, system operation logs, security event data and industrial control system asset information, etc.
  • Each nuclear power industrial control system transmits its own data collected through the isolation device through the data collection network to the data aggregation equipment.
  • the data aggregation equipment analyzes the received data. Preprocessing includes format conversion of data, such as converting code into visual data, and removing redundant useless data.
  • the processed data will be transmitted to the central control equipment of the global data control system of the nuclear power plant industrial control system network security through the system cluster port side isolation device and the core network of the plant-wide industrial control system safety management center.
  • each nuclear power industrial control system transmits its operating data to the data aggregation device through an isolation device.
  • the isolation device here can prevent data from flowing back and preventing data from different systems from being confused; the preprocessed data passes through the system cluster
  • the port-side isolation device is transmitted through the core network of the plant-wide industrial control system safety management center to the central control equipment of the global data control system of the nuclear power plant industrial control system network security.
  • the system cluster port-side isolation device here can control each nuclear power industry
  • the system cluster is separated from the core network of the security management center of the entire factory's industrial control system. Since the core network of the security management center of the entire factory's industrial control system has a low security level, it is vulnerable to attacks. After separation, even if the core network of the security management center of the entire factory's industrial control system is attacked. Attacks, these attacks will not affect the nuclear power industrial control system cluster.
  • this embodiment specifically explains how to transmit global control data from the jurisdiction area within the nuclear power plant to outside the nuclear power plant.
  • Jurisdiction this method specifically includes:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence; among them, the first control side isolation device is located in the production area within the jurisdiction of the nuclear power plant. Between the area and the office area, the second control side isolation device is located between the office area within the jurisdiction of the nuclear power plant and the jurisdiction area outside the nuclear power plant, and the one-way data transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device. Side isolation device.
  • the central control equipment of the global data control system of the nuclear power plant industrial control system network security sends the data through the first control side isolation device to send the global control data of the nuclear power plant from the production area within the jurisdiction of the nuclear power plant to the office of the nuclear power plant.
  • the data management equipment in the area, and then the data management equipment in the office area transmits the global control data of the nuclear power plant from the office area of the nuclear power plant to the jurisdiction outside the nuclear power plant through the second control side isolation device. Specifically, it is transmitted to Superior nuclear power management equipment in jurisdictions outside the nuclear power plant.
  • this embodiment can also transmit global control data from the jurisdiction area within the nuclear power plant to outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence.
  • the first upper-level nuclear power management equipment in the jurisdiction so that the first upper-level nuclear power management equipment transmits global control data to the second upper-level nuclear power management equipment in the jurisdiction outside the nuclear power plant through the first control side isolation device.
  • the central control device of the global data control system of the nuclear power plant industrial control system network security passes the data through the first control side isolation device to separate the global control data of the nuclear power plant from the production areas within the jurisdiction of the nuclear power plant.
  • the data management equipment in the office area of the nuclear power plant then sends the global control data of the nuclear power plant from the office area of the nuclear power plant to the jurisdiction outside the nuclear power plant through the second control side isolation device.
  • the first-level nuclear power management equipment in the district sends data to the second-level nuclear power management equipment through the first control-side isolation device.
  • a first control-side isolation device with higher one-way data transmission isolation (such as a physical interruption single-conductor isolation device) is used between the production area and the office area within the jurisdiction of the nuclear power plant.
  • the security of the office area is similar to that of the first-level nuclear power management equipment, so one-way data transmission isolation is used to isolate the lower second control side isolation device (such as a logical isolation device). It not only ensures safety to a certain extent, but also reduces the cost of the isolation device; the safety of the second-level nuclear power management equipment is much lower than that of the first-level nuclear power management equipment, so the first-level nuclear power management equipment is different from the second-level nuclear power management equipment.
  • Management equipment uses a first control-side isolation device with higher data unidirectional transmission isolation (such as a physical isolation single-conductor isolation device). In this way, even if the second-level nuclear power management equipment is threatened by network security, the threat will not affect the first-level nuclear power management equipment. The higher-level nuclear power management equipment is affected.
  • the above embodiment introduces two control-side isolation devices when transferring global control data from the internal jurisdiction area of the nuclear power plant to the external jurisdiction area of the nuclear power plant, namely the first control-side isolation device between the production area and the office area and the office area nuclear power plant
  • the second control-side isolation device between the external jurisdictions further ensures that when the external jurisdictions of the nuclear power plant with relatively weak security are attacked by a network, the internal jurisdictions of the nuclear power plant will not be affected by the attack, maximizing the protection of the nuclear power plant. factory safety.
  • this embodiment provides a global data control method for nuclear power plant industrial control system network security.
  • the optional methods of the method are shown in Figure 8-9:
  • nuclear power management data includes network security data of nuclear power plant industrial control systems.
  • the central control device of the global data control system of the nuclear power plant industrial control system network security starts from the nuclear power management server cluster, such as data storage server, data analysis server, data interface server, terminal security server, virus It works with the patch server, emergency platform server, account management server and threat intelligence server to obtain the nuclear power management data of the nuclear power management server cluster.
  • the nuclear power management data of the nuclear power management server cluster is transmitted to the nuclear power plant industrial control through the core network of the plant-wide industrial control system security management center.
  • the central control device of the global data control system for system network security is provided to the nuclear power management server cluster.
  • S802 Obtain the operation data of each nuclear power industrial control system cluster through the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster.
  • each nuclear power industrial control system collects its own operating data and sends it to the data aggregation equipment through the isolation device for data preprocessing.
  • the aggregation equipment then passes the preprocessed operating data through the whole plant industrial control system.
  • the core network and port-side isolation device of the system security management center are sent to the central control equipment of the global data control system of the nuclear power plant industrial control system network security.
  • S803 Process the operation data and nuclear power management data to obtain global control data of the nuclear power plant.
  • the central control device of the global data control system of the nuclear power plant industrial control system network security obtains the nuclear power management data of the nuclear power management server cluster and the nuclear power industrial control system through the core network of the security management center of the whole plant industrial control system.
  • the operation data of the cluster are summarized and processed, and finally the global control data of the nuclear power plant is obtained.
  • S804 Transmit global control data from the jurisdiction area within the nuclear power plant to the first-level nuclear power management equipment in the area outside the nuclear power plant through the first control-side isolation device and the second control-side isolation device, so that the first-level nuclear power management The equipment transmits global control data to the second-level nuclear power management equipment in the jurisdiction outside the nuclear power plant through the first control side isolation device.
  • the central control equipment of the global data control system of the nuclear power plant industrial control system network security transmits the global control data to the data management equipment in the nuclear power plant office area through the first control side isolation device; the nuclear power plant The data management equipment in the office area transmits the global control data to the first-level nuclear power management equipment in the jurisdiction outside the nuclear power plant through the second control-side isolation device; the first-level nuclear power management equipment transmits the global control data through the first control-side isolation device. Transmitted to the second-level nuclear power management equipment.
  • embodiments of the present application also provide a global data control device for nuclear power plant industrial control system network security that is used to implement the above-mentioned global data control method for nuclear power plant industrial control system network security.
  • the solution to the problem provided by this device is similar to the solution recorded in the above method. Therefore, the specific limitations in the embodiments of the global data control device for network security of one or more nuclear power plant industrial control systems provided below can be found in The above-mentioned limitations on the global data control method for nuclear power plant industrial control system network security will not be repeated here.
  • a global data control device 10 for network security of a nuclear power plant industrial control system including: a management data acquisition module 100, an operation data acquisition module 101, a global data determination module 102 and Data transmission module 103, wherein:
  • the management data acquisition module 100 is used to acquire nuclear power management data of the nuclear power management server cluster; the nuclear power management data includes network security data of the nuclear power plant industrial control system.
  • the operation data acquisition module 101 is used to obtain operation data of at least two nuclear power industrial control system clusters through the system cluster port side isolation device.
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters.
  • the global data determination module 102 is used to process operation data and nuclear power management data to obtain global control data of the nuclear power plant.
  • the data transmission module 103 is used to transmit global control data from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant through the control side isolation device.
  • the above-mentioned operation data acquisition module 101 is specifically configured to obtain the operation data of each nuclear power industrial control system cluster through the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster.
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is configured according to the adjacent nuclear power plant system cluster.
  • the similarity of the security level is determined; and the similarity of the security level is inversely proportional to the data one-way transmission isolation capability of the cluster space isolation device.
  • the data transmission module 103 in Figure 10 is specifically used to transmit global control data from the jurisdiction area within the nuclear power plant to outside the nuclear power plant through the first control side isolation device and the second control side isolation device. jurisdiction; wherein, the first control side isolation device is located between the production area and the office area within the nuclear power plant's jurisdiction, and the second control side isolation device is located between the office area within the nuclear power plant's jurisdiction and the jurisdiction outside the nuclear power plant, Moreover, the one-way data transmission isolation capability of the first control-side isolation device is higher than that of the second control-side isolation device.
  • the data transmission module 103 in Figure 10 is also specifically used to: transmit global control data from the jurisdiction area of the nuclear power plant to the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence.
  • the first higher-level nuclear power management equipment in the jurisdiction outside the nuclear power plant so that the first higher-level nuclear power management equipment transmits global control data to the second higher-level nuclear power management equipment in the jurisdiction outside the nuclear power plant through the first control side isolation device.
  • each nuclear power industrial control system cluster includes: at least two nuclear power industrial control systems and data aggregation equipment, and each nuclear power industrial control system transmits locally generated operating data to the data aggregation device through a system data isolation device. equipment; correspondingly, obtaining the operation data of at least two nuclear power industrial control system clusters through the system cluster port side isolation device, including: obtaining from the data summary equipment of each nuclear power industrial control system cluster through the system cluster port side isolation device Operational data of each nuclear power industrial control system cluster.
  • the nuclear power management server cluster includes: at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server. .
  • Each module in the global data control device of the above-mentioned nuclear power plant industrial control system network security can be realized in whole or in part through software, hardware and their combination.
  • Each of the above modules can be embedded in or independent of the processor in the central control device in the form of hardware, or can be stored in the memory of the central control device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.
  • a central control device is provided.
  • the central control device may be a terminal, and its internal structure diagram may be as shown in Figure 11.
  • the central control device includes a processor, a memory, an input/output interface, a communication interface, a display unit and an input device.
  • the processor, memory and input/output interface are connected through the system bus, and the communication interface, display unit and input device are connected to the system bus through the input/output interface.
  • the processor of the central control device is used to provide computing and control capabilities.
  • the memory of the central control device includes non-volatile storage media and internal memory.
  • the non-volatile storage medium stores operating systems and computer programs. This internal memory provides an environment for the execution of operating systems and computer programs in non-volatile storage media.
  • the input/output interface of the central control device is used to exchange information between the processor and external devices.
  • the communication interface of the central control device is used for wired or wireless communication with external terminals.
  • the wireless mode can be implemented through WIFI, mobile cellular network, NFC (Near Field Communication) or other technologies.
  • the computer program When executed by a processor, it implements a global data control method for network security of a nuclear power plant industrial control system.
  • the display unit of the central control device is used to form a visually visible picture, and can be a display screen, a projection device or a virtual reality imaging device.
  • the display screen can be a liquid crystal display or an electronic ink display.
  • the input device of the central control device can be a touch layer covered on the display screen, or it can be a button, trackball or touch pad provided on the central control device shell. It can be an external keyboard, trackpad or mouse, etc.
  • FIG. 11 is only a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the central control device to which the solution of the present application is applied.
  • the specific central control device Devices may include more or fewer components than shown in the figures, or some combinations of components, or have different arrangements of components.
  • a central control device including a memory and a processor.
  • a computer program is stored in the memory.
  • the processor executes the computer program, it implements the following steps:
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters
  • control side isolation device Through the control side isolation device, global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant.
  • the operation data of at least two nuclear power industrial control system clusters is obtained through the system cluster port side isolation device, including:
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined based on the similarity of the safety levels of the adjacent nuclear power plant system clusters; and the similarity of the safety level and the one-way transmission of data from the cluster space isolation device Inversely proportional to isolation ability.
  • global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant through the control side isolation device, include:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence; among them, the first control side isolation device is located in the production area within the jurisdiction of the nuclear power plant. Between the area and the office area, the second control side isolation device is located between the office area within the jurisdiction of the nuclear power plant and the jurisdiction area outside the nuclear power plant, and the one-way data transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device. Side isolation device.
  • global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence, including:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the first-level nuclear power management equipment in the area outside the nuclear power plant through the first control-side isolation device and the second control-side isolation device in sequence, so that the first-level nuclear power management equipment passes
  • the first control-side isolation device transmits global control data to the second-level nuclear power management equipment in the jurisdiction outside the nuclear power plant.
  • each nuclear power industrial control system cluster includes: at least two nuclear power industrial control systems and data aggregation equipment, and each nuclear power industrial control system transmits locally generated operating data to the data aggregation equipment through a system data isolation device.
  • the processor also implements the following steps when executing the computer program:
  • the operation data of each nuclear power industrial control system cluster is obtained from the data aggregation equipment of each nuclear power industrial control system cluster.
  • the nuclear power management server cluster includes: at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server.
  • a computer-readable storage medium is provided with a computer program stored thereon.
  • the computer program is executed by a processor, the following steps are implemented:
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system
  • cluster space isolation devices are configured between adjacent nuclear power plant system clusters
  • control side isolation device Through the control side isolation device, global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant.
  • the operation data of at least two nuclear power industrial control system clusters is obtained through the system cluster port side isolation device, including:
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is proportional to the data one-way transmission isolation capability of the system cluster port side isolation device.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined based on the similarity of the safety levels of the adjacent nuclear power plant system clusters; and the similarity of the safety level and the one-way transmission of data from the cluster space isolation device Inversely proportional to isolation ability.
  • global control data is transmitted from the jurisdiction area inside the nuclear power plant to the jurisdiction area outside the nuclear power plant through the control side isolation device, including:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence; among them, the first control side isolation device is located in the production area within the jurisdiction of the nuclear power plant. Between the area and the office area, the second control side isolation device is located between the office area within the jurisdiction of the nuclear power plant and the jurisdiction area outside the nuclear power plant, and the one-way data transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device. Side isolation device.
  • global control data is transmitted from the jurisdiction area within the nuclear power plant to the jurisdiction area outside the nuclear power plant through the first control side isolation device and the second control side isolation device in sequence, including:
  • the global control data is transmitted from the jurisdiction area within the nuclear power plant to the first-level nuclear power management equipment in the area outside the nuclear power plant through the first control-side isolation device and the second control-side isolation device in sequence, so that the first-level nuclear power management equipment passes
  • the first control-side isolation device transmits global control data to the second-level nuclear power management equipment in the jurisdiction outside the nuclear power plant.
  • each nuclear power industrial control system cluster includes: at least two nuclear power industrial control systems and data aggregation equipment, and each nuclear power industrial control system transmits locally generated operating data to the data aggregation equipment through a system data isolation device. ; Correspondingly, obtain the operating data of at least two nuclear power industrial control system clusters through the isolation device on the system cluster port side, including:
  • the operation data of each nuclear power industrial control system cluster is obtained from the data aggregation equipment of each nuclear power industrial control system cluster.
  • the nuclear power management server cluster includes: at least one of a data storage server, a data analysis server, a data interface server, a terminal security server, a virus and patch server, an emergency platform server, an account management server, and a threat intelligence server. kind.
  • a global data control system for network security of a nuclear power plant industrial control system includes: central control equipment, a nuclear power management server cluster, at least two nuclear power industrial control system clusters, a cluster space isolation device located between adjacent nuclear power plant system clusters, a system cluster port side isolation device for each nuclear power plant system cluster; and a control side isolation device;
  • the nuclear power management server cluster is used to store nuclear power management data;
  • the nuclear power management data includes network security data of the nuclear power plant industrial control system;
  • Each nuclear power industrial control system cluster is used to store the operation data of each nuclear power industrial control system cluster
  • the central control device is used to execute the steps of the global data control method for nuclear power plant industrial control system network security described in any of the above embodiments.
  • the system cluster port side isolation device corresponding to each nuclear power industrial control system cluster is determined according to the security level of each nuclear power industrial control system cluster, and the security level is related to the data one-way transmission isolation capability of the system cluster port side isolation device. Strength is directly proportional.
  • the cluster space isolation device configured between adjacent nuclear power plant system clusters is determined based on the similarity of the safety levels of the adjacent nuclear power plant system clusters; and the similarity of the safety level and the one-way transmission of data from the cluster space isolation device Inversely proportional to isolation ability.
  • control side isolation device includes a first control side isolation device located between the production area and the office area of the nuclear power plant's internal jurisdiction, and a third control side isolation device located between the nuclear power plant's internal jurisdiction and the nuclear power plant's external jurisdiction. Two control side isolation devices, and the one-way data transmission isolation capability of the first control side isolation device is higher than that of the second control side isolation device.
  • the computer program can be stored in a non-volatile computer-readable storage medium. , when executed, the computer program may include the processes of the above method embodiments. Any reference to memory, database or other media used in the embodiments provided in this application may include at least one of non-volatile and volatile memory.
  • Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetic variable memory (Magnetoresistive Random Access Memory (MRAM), ferroelectric memory (Ferroelectric Random Access Memory, FRAM), phase change memory (Phase Change Memory, PCM), graphene memory, etc.
  • Volatile memory may include random access memory (Random Access Memory, RAM) or external cache memory, etc.
  • RAM Random Access Memory
  • RAM random access memory
  • RAM Random Access Memory
  • the databases involved in the various embodiments provided in this application may include at least one of a relational database and a non-relational database.
  • Non-relational databases may include blockchain-based distributed databases, etc., but are not limited thereto.
  • the processors involved in the various embodiments provided in this application may be general-purpose processors, central processing units, graphics processors, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to this.

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Manufacturing & Machinery (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Power Sources (AREA)
  • Monitoring And Testing Of Nuclear Reactors (AREA)

Abstract

一种核电厂工业控制系统网络安全的全局数据控制方法、装置（10）、中央控制设备和存储介质。方法包括：获取核电管理服务器集群的核电管理数据（S201）；核电管理数据包括核电厂工业控制系统的网络安全数据；通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据（S202）；其中，相邻核电站系统集群之间配置有集群空间隔离装置；对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据（S203）；通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区（S204）。

Description

核电厂工业控制系统网络安全的全局数据控制方法和装置
本申请要求于2023年02月24日申请的，申请号为202310207102X、名称为“核电厂工业控制系统网络安全的全局数据控制方法和装置”的中国专利申请的优先权，在此将其全文引入作为参考。
技术领域
本申请涉及计算机技术领域，特别是涉及一种核电厂工业控制系统网络安全的全局数据控制方法和装置。
背景技术
随着科技与工业的进步，为了实现可持续发展，人们也越来越重视环境问题，传统能源的占比也越来越少，核能作为一种新能源应运而生。
核能相比传统能源不但更加环保，而且能够提供更大量的能源，因此核能必将成为未来能源供给的主力，核电厂作为将核能转化为电能的重要神经中枢，不但要承担电力生产自动控制功能，同时也要承担核安全保障的核心功能。但随着信息化、数字化、智能化技术在核电厂的数字化仪控系统上广泛应用，给核电厂工业控制系统带来了网络安全威胁，影响了核电厂的网络安全与核安全。因此如何对核电厂内所有工业控制系统的网络安全进行集中管理控制，如何应对网络安全威胁，成为了亟待解决的问题。发明内容
基于此，有必要针对上述技术问题，提供一种能够对核电厂全局态势进行感知和操控的核电厂工业控制系统网络安全的全局数据控制方法和装置。
第一方面，本申请提供了一种核电厂工业控制系统网络安全的全局数据控制方法。该方法包括：
获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
在其中一个实施例中，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取各核电工业控制系统集群的运行数据；
其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
在其中一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在其中一个实施例中，通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，第一控制侧隔离装置位于核电厂内管辖区的生产区和办公区之间，第二控制侧隔离装置位于核电厂内管辖区的办公区与核电厂外管辖区之间，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
在其中一个实施例中，依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
在其中一个实施例中，每一核电工业控制系统集群包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至数据汇总设备；
相应的，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的数据汇总设备中获取各核电工业控制系统集群的运行数据。
在其中一个实施例中，核电管理服务器集群包括：数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器中的 至少一种。
第二方面，本申请还提供了一种核电厂工业控制系统网络安全的全局数据控制装置。装置包括：
管理数据获取模块，用于获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
运行数据获取模块，用于通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
全局数据确定模块，用于对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
数据传输模块，用于通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
第三方面，本申请还提供了一种中央控制设备。中央控制设备包括存储器和处理器，存储器存储有计算机程序，处理器执行计算机程序时实现以下步骤：
获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
第四方面，本申请还提供了一种计算机可读存储介质。计算机可读存储介质，其上存储有计算机程序，计算机程序被处理器执行时实现以下步骤：
获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
第五方面，本申请还提供了一种核电厂工业控制系统网络安全的全局数据控制系统。系统包括：中央控制设备、核电管理服务器集群、至少两个核电工业控制系统集群、位于相邻核电站系统集群之间的集群空间隔离装置、各核电站系统集群的系统集群端口侧隔离装置；以及控制侧隔离装置；
核电管理服务器集群用于存储核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
各核电工业控制系统集群用于存储各核电工业控制系统集群的运行数据；
中央控制设备用于执行上述任意实施例所述的核电厂工业控制系统网络安全的全局数据控制方法的步骤。
在其中一个实施例中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力强成正比。
在其中一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在其中一个实施例中，控制侧隔离装置包括位于核电厂内管辖区的生产区和办公区之间的第一控制侧隔离装置，以及位于核电厂内管辖区与核电厂外管辖区之间的第二控制侧隔离装置，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
附图说明
为了更清楚地说明本申请实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本申请的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1为一个实施例中核电厂工业控制系统网络安全的全局数据控制方法的应用环境图；
图2为一个实施例中核电厂工业控制系统网络安全的全局数据控制方法的流程示意图；
图3为一个实施例中核电管理服务集群的示意图；
图4为一个实施例中不同核电工业控制系统集群的分区示意图；
图5为一个实施例中核电工业控制系统集群的运行数据与核电管理服务集群的管理数据的获取原理示意图；
图6为一个实施例中核电工业控制系统集群的运行数据的获取原理示意图；
图7为一个实施例中核电厂数据向上级单位传输的原理示意图；
图8为另一个实施例中核电厂工业控制系统网络安全的全局数据控制方法的流程示意图；
图9为一个实施例中核电厂全厂的结构示意图；
图10为一个实施例中核电厂工业控制系统网络安全的全局数据控制装置的结构框图；
图11为一个实施例中的中央控制设备的内部结构图。
具体实施方式
为了使本申请的目的、技术方案及优点更加清楚明白，以下结合附图及实施例，对本申请进行进一步详细说明。应当理解，此处描述的具体实施例仅仅用以解释本申请，并不用于限定本申请。
本申请实施例提供的核电厂工业控制系统网络安全的全局数据控制方法，可以应用于如图1所示的应用环境中。在一个实施例中，提供了一种中央控制设备，该中央控制设备可以是服务器，其内部结构图可以如图1所示。该中央控制设备包括通过系统总线连接的处理器、存储器和网络接口。其中，该中央控制设备的处理器用于提供计算和控制能力。该中央控制设备的存储器包括非易失性存储介质和内存储器。该非易失性存储介质存储有操作系统、计算机程序和数据库。该内存储器为非易失性存储介质中的操作系统和计算机程序的运行提供环境。该中央控制设备的数据库用于存储进行核电厂工业控制系统网络安全的全局数据控制处理时所需的数据。该中央控制设备的网络接口用于与外部的终端通过网络连接通信。该计算机程序被处理器执行时以实现下述任意实施例所示的核电厂工业控制系统网络安全的全局数据控制方法。
在一个实施例中，如图2所示，提供了一种核电厂工业控制系统网络安全的全局数据控制方法，以该方法应用于图1中的中央控制设备为例进行说明，包括以下步骤：
S201，获取核电管理服务器集群的核电管理数据。
可选的，核电管理数据包括核电厂工业控制系统的网络安全数据。
其中，如图3所示，核电管理服务器集群包括多个核电管理服务器，每个核电管理服务器都可以提供或储存核电厂工业控制系统的网络安全数据，核电管理服务器可以包括，数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、防病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器等。
其中，数据存储服务器用于对全厂的所有数据进行存储，包括每个服务器的数据以及对数据的处理过程，处理结果，包括遇到的攻击，攻击过程，防控方法，人员的操作记录等所有的数据；数据分析服务器用于通过数据统计、数据关联、数据建模、人工智能等数据分析方法对核电厂所有被集中管控的相关数据进行去重、数据清洗、数据分类、数据填充、数据标签、归一化等处理，并将数据进行归类存储；数据接口服务器主要负责与外部以及上级单位进行连接，核电厂工业控制系统网络安全的全局数据控制系统用于按照国家有关部门网络安全监督、管理的要求，以及各个核电工业控制系统实际运行情况，定期生成核电厂生产安全分析报告、运行分析报告，并将生成的报告定期发送给上级单位，其中，生成的报告内容包括且不限于安全事件、告警分类、重点网络安全事件、工控系统运行事件；终端安全服务器用于根据全厂发生的事件，指导安全运维人员对系统进行整改；防病毒与补丁服务器用于发现病毒之后，使用补丁对病毒进行修复，并对该种病毒进行记录和防控；应急平台服务器用于制定应急预案并发送至核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备，由中央控制设备根据安全事件等级，调用预先设定的事件推送规则，将安全事件等级实时推送至全厂网络安全应急响应与管理平台，以使全厂网络安全应急响应与管理平台基于安全事件等级执行该应急预案；账户管理终端用于对用户的账户进行管理，包括安全管理，以及对各个用户的权限等级进行管理；威胁情报服务器用于对全厂受到的安全威胁进行预测及展示。
可选的，从上述服务器中获取到每个服务器的数据。具体的，集群中的各核电管理服务器与中央控制设备都连接于一个全厂工控系统安全管理中心核心网中，可以通过核心网获取核电管理服务器集群的核电厂工业控制系统的网络安全数据。
S202，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据。
其中，核电工业控制系统集群可以是由安全等级相似的核电工业控制系统组成的集群，其中可以包含多个核电工业控制系统。
本实施例的核电工业控制系统集群的数量为至少两个，相邻核电工业控制系统集群之间配置有集群空间隔离装置。集群空间隔离装置是用于将相邻核电工业控制系统集群隔开来，防止相邻核电工业控制系统集群的数据互相流通，这样即使一个核电工业控制系统集群受到网络攻击，与其相邻的核电工业控制系统集群也不会受到攻击的影响。
可选的，本实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，可以根据相邻核电站系 统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。例如，可以根据每个核电工业控制系统集群在全厂的重要程度确定各核电工业控制系统集群对应的安全等级，如果相邻的两个核电工业控制系统集群的安全等级相同或相似，则为该相邻的两个核电工业控制系统集群设置单向传输能力较低的集群空间隔离装置(如逻辑隔离装置)，以此来节约成本。如果相邻的两个核电工业控制系统集群的安全等级相差较大，则为该相邻的两个核电工业控制系统集群设置单向传输能力较高的集群空间隔离装置(如电力单向正向隔离装置)，以此来最大限度的保证安全。
可选的，如图4所示，当两个核电工业控制系统集群安全等级相似时，如安全1区和安全2区，可以采用数据单向传输隔离能力较低的系统集群端口侧隔离装置来降低成本；当两个核电工业控制系统集群安全等级相差较大时，如安全2区和生产管理区，可以采用数据单向传输隔离能力较高的系统集群端口侧隔离装置来最大限度的保证安全性。
系统集群端口侧隔离装置可以是用于隔离核电工业控制系统集群与中央控制设备之间数据传输方向的装置，即核电工业控制系统集群的运行数据能够传输至中央控制设备，但是中央控制设备中的数据不能反向传输至核电工业控制系统集群。可选的，可以是所有的核电工业控制系统集群对应同一个系统集群端口侧隔离装置，也可以是每个核电工业控制系统集群各对应一个系统集群端口侧隔离装置。
可选的，由于隔离装置的单向传输能力越强其成本越高，在本实施例中，为了节约成本，优选为每个核电工业控制系统集群配置一个专属的系统集群端口侧隔离装置，其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
可选的，本实施例中，若核电工业控制系统集群对应一个公共的系统集群端口侧隔离装置，则此时可以通过该公共的系统集群端口侧隔离装置，与各个核电工业控制系统集群进行交互，以获取各个核电工业控制系统集群的运行数据；若核电工业控制系统集群对应各自单独的系统集群端口侧隔离装置，则此时可以通过该各自的系统集群端口侧隔离装置，与各个核电工业控制系统集群进行交互，以获取各个核电工业控制系统集群的运行数据。
S203，对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据。
可选的，如图5所示，将获取到的核电管理服务器集群的核电管理数据以及核电工业控制系统集群的运行数据通过全厂工控系统安全管理中心核心网发送至核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备进行汇总，从而得到核电厂的全局控制数据。
可选的，中央控制设备还可对接收到的运行数据和核电管理数据进行相关处理，例如，进行态势展示、监测预警、安全运维、信息共享、资产管理与安全分析、应急响应、外部接口、系统管理、系统安全管理、审计管理、自身安全要求、数据处理、数据分析等，并将处理结果也一并作为全局控制数据。
S204，通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
其中，控制侧隔离装置用于将核电厂内管辖区与核电厂外管辖区分隔开，由于核电厂外管辖区的安全性较低，相比核电厂内管辖区更容易受到安全攻击，控制侧隔离装置可以在核电厂外管辖区受到攻击时，保护核电厂内管辖区不受到攻击的威胁，极大的保障了核电厂内管辖区的安全。
核电厂内管辖区为核电厂内的所有区域，包括核电管理服务器集群、核电工业控制系统集群和核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备等所在的区域。核电厂外管辖区为除核电厂内管辖区外的其他区域，例如，可以包括第一上级核电管理设备和第二上级核电管理设备所在区域。
可选的，可以通过控制侧隔离装置，基于光信号传导方式将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。例如，可以传输给核电厂外管辖区的第一上级核电管理设备和第二上级核电管理设备。
上述实施例从各个服务器获得核电管理数据，以及从至少两个核电工业控制系统集群中获取的运行数据，并对获取到的数据进行集中管理并处理，得到核电厂的全局控制数据，实现了对全厂数据的掌握。另外，在获取各核电工业控制系统集群中获取的运行数据时，引入了系统集群端口侧隔离装置，从而实现了运行数据的单向传输，避免了核电工业控制系统集群的运行数据发生混淆，且相邻核电站系统集群之间配置有集群空间隔离装置，保证了不同核电站系统集群之间的独立性，即使某个区域受到了安全威胁，也不会对其相邻的区域带来危险，最大限度的保证了核电厂的安全性。
可选的，本实施例的每一核电工业控制系统集群可以包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至数据汇总设备；相应的，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的数据汇总设备中获取各核电工业控制系统集群的运行数据。
其中，数据汇总设备可以是对其所在核电工业控制系统集群中的各核电工业控制系统的运行数据 进行汇总的设备。
可选的，核电厂中存在多个核电工业控制系统，对这些核电工业控制系统按照其对应的安全等级进行分类，将安全等级相似或相同的系统放到同一个区域中，每一个区域中的各核电工业控制系统作为一个核电工业控制系统集群，例如，可以将安全等级较高的核电工业控制系统对应区域作为安全1区、将安全等级中等的核电工业控制系统对应区域作为安全2区，将安全等级较低的核电工业控制系统对应区域作为生产管理区等。如图6所示，在每个区域内，每个核电工业控制系统分别采集自身的运行数据，包括网络原始全流量、主机日志、安全设备日志(自身日志和审计记录)、网络设备等日志、安全策略、系统运行日志、安全事件数据和工控系统资产信息等，每个核电工业控制系统分别通过隔离装置通过数据采集网将自身采集的数据传输给数据汇总设备，数据汇总设备对接收到的数据进行预处理，包括对数据进行格式转化，如将代码转化为可视化的数据，以及将多余的无用数据剔除等。处理后的数据将通过系统集群端口侧隔离装置和全厂工控系统安全管理中心核心网，传输至核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备。
可选的，每个核电工业控制系统通过隔离装置将各自的运行数据传输给数据汇总设备，此处的隔离装置可以防止数据倒流，防止不同系统的数据发生混淆；预处理后的数据通过系统集群端口侧隔离装置，经过全厂工控系统安全管理中心核心网传输到核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备，此处的系统集群端口侧隔离装置可以将每个核电工业控制系统集群与全厂工控系统安全管理中心核心网分割开，由于全厂工控系统安全管理中心核心网的安全等级较低，容易受到攻击，隔开后，即使全厂工控系统安全管理中心核心网受到攻击，这些攻击也不会影响到核电工业控制系统集群。
为了对核电厂工业控制系统网络安全的全局数据控制方法做更详细的阐述，在上述实施例的基础上，本实施例具体阐述了如何将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，该方法具体包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，第一控制侧隔离装置位于核电厂内管辖区的生产区和办公区之间，第二控制侧隔离装置位于核电厂内管辖区的办公区与核电厂外管辖区之间，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
具体的，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备将数据通过第一控制侧隔离装置将核电厂的全局控制数据从核电厂内管辖区的生产区发送至核电厂的办公区的数据管理设备，再由办公区的数据管理设备，通过第二控制侧隔离装置将核电厂的全局控制数据，从核电厂的办公区再发送至核电厂外管辖区，具体的，传输至核电厂外管辖区的上级核电管理设备。
可选的，在上述实施例方式的基础上，本实施例还可以是依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
可选的，如图7所示，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备将数据通过第一控制侧隔离装置将核电厂的全局控制数据从核电厂内管辖区的生产区发送至核电厂的办公区的数据管理设备，再由办公区的数据管理设备，通过第二控制侧隔离装置将核电厂的全局控制数据，从核电厂的办公区再发送至核电厂外管辖区的第一上级核电管理设备，由第一上级核电管理设备再通过第一控制侧隔离装置将数据发送至第二上级核电管理设备。
需要说明的是，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备位于核电厂内管辖区的生产区，其安全性较高，而核电厂内管辖区的办公区安全性较低，因此核电厂内管辖区的生产区与办公区之间采用数据单向传输隔离更高的第一控制侧隔离装置(如物断单导隔离装置)，这样即使办公区受到网络安全威胁，该威胁也不会对核电厂的生产区造成影响；而办公区与第一上级核电管理设备的安全性相近，因此采用数据单向传输隔离较低第二控制侧隔离装置(如逻辑隔离装置)，不但一定程度保证了安全，也降低了隔离装置的成本；第二上级核电管理设备的安全性又远低于第一上级核电管理设备的安全性，因此第一上级核电管理设备与第二上级核电管理设备之间采用数据单向传输隔离更高的第一控制侧隔离装置(如物断单导隔离装置)，这样即使第二上级核电管理设备受到网络安全威胁，该威胁也不会对第一上级核电管理设备造成影响。
上述实施例在将全局控制数据从核电厂内管辖区与核电厂外管辖区时，引入两种控制侧隔离装置，即生产区与办公区之间的第一控制侧隔离装置以及办公区域核电厂外管辖区之间的第二控制侧隔离装置，进一步保证了当安全性较为薄弱的核电厂外管辖区受到网络攻击时，核电厂内管辖区不会受到攻击的影响，最大限度的保障了核电厂的安全。
为了更全面的展示本方案，本实施例给出了一种核电厂工业控制系统网络安全的全局数据控制方 法的可选方式，如图8-9所示：
S801，获取核电管理服务器集群的核电管理数据。
其中，核电管理数据包括核电厂工业控制系统的网络安全数据。
示例性的，如图9所示，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备从核电管理服务器集群，如数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器，获取核电管理服务器集群的核电管理数据，核电管理服务器集群的核电管理数据经由全厂工控系统安全管理中心核心网传输至核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备。
S802，通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取各核电工业控制系统集群的运行数据。
示例性的，如图9所示，各核电工业控制系统采集自身的运行数据，并通过隔离装置发送至数据汇总设备进行数据预处理，据汇总设备再将预处理后的运行数据通过全厂工控系统安全管理中心核心网和端口侧隔离装置发送至核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备。
S803，对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据。
示例性的，如图9所示，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备通过全厂工控系统安全管理中心核心网获取核电管理服务器集群的核电管理数据和核电工业控制系统集群的运行数据，并进行汇总与处理，最终得到核电厂的全局控制数据。
S804，依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
示例性的，如图9所示，核电厂工业控制系统网络安全的全局数据控制系统的中央控制设备通过第一控制侧隔离装置将全局控制数据传输至核电厂办公区的数据管理设备；核电厂办公区的数据管理设备通过第二控制侧隔离装置将全局控制数据传输至核电厂外管辖区的第一上级核电管理设备；第一上级核电管理设备，通过第一控制侧隔离装置将全局控制数据传输至第二上级核电管理设备。
上述S801-S804的具体过程可以参见上述方法实施例的描述，其实现原理和技术效果类似，在此不再赘述。
应该理解的是，虽然如上的各实施例所涉及的流程图中的各个步骤按照箭头的指示依次显示，但是这些步骤并不是必然按照箭头指示的顺序依次执行。除非本文中有明确的说明，这些步骤的执行并没有严格的顺序限制，这些步骤可以以其它的顺序执行。而且，如上的各实施例所涉及的流程图中的至少一部分步骤可以包括多个步骤或者多个阶段，这些步骤或者阶段并不必然是在同一时刻执行完成，而是可以在不同的时刻执行，这些步骤或者阶段的执行顺序也不必然是依次进行，而是可以与其它步骤或者其它步骤中的步骤或者阶段的至少一部分轮流或者交替地执行。
基于同样的发明构思，本申请实施例还提供了一种用于实现上述所涉及的核电厂工业控制系统网络安全的全局数据控制方法的核电厂工业控制系统网络安全的全局数据控制装置。该装置所提供的解决问题的实现方案与上述方法中所记载的实现方案相似，故下面所提供的一个或多个核电厂工业控制系统网络安全的全局数据控制装置实施例中的具体限定可以参见上文中对于核电厂工业控制系统网络安全的全局数据控制方法的限定，在此不再赘述。
在一个实施例中，如图10所示，提供了一种核电厂工业控制系统网络安全的全局数据控制装置10，包括：管理数据获取模块100、运行数据获取模块101、全局数据确定模块102和数据传输模块103，其中：
管理数据获取模块100，用于获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据。
运行数据获取模块101，用于通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据。其中，相邻核电站系统集群之间配置有集群空间隔离装置。
全局数据确定模块102，用于对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据。
数据传输模块103，用于通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
在另一个实施例中，上述运行数据获取模块101具体用于通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取各核电工业控制系统集群的运行数据。
其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
在另一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群 的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在另一个实施例中，上述图10中的数据传输模块103具体用于依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，第一控制侧隔离装置位于核电厂内管辖区的生产区和办公区之间，第二控制侧隔离装置位于核电厂内管辖区的办公区与核电厂外管辖区之间，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
在另一个实施例中，上述图10中的数据传输模块103还具体用于：依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
在另一个实施例中，每一核电工业控制系统集群包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至数据汇总设备；相应的，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的数据汇总设备中获取各核电工业控制系统集群的运行数据。
在另一个实施例中，核电管理服务器集群包括：数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器中的至少一种。
上述核电厂工业控制系统网络安全的全局数据控制装置中的各个模块可全部或部分通过软件、硬件及其组合来实现。上述各模块可以硬件形式内嵌于或独立于中央控制设备中的处理器中，也可以以软件形式存储于中央控制设备中的存储器中，以便于处理器调用执行以上各个模块对应的操作。
在一个实施例中，提供了一种中央控制设备，该中央控制设备可以是终端，其内部结构图可以如图11所示。该中央控制设备包括处理器、存储器、输入/输出接口、通信接口、显示单元和输入装置。其中，处理器、存储器和输入/输出接口通过系统总线连接，通信接口、显示单元和输入装置通过输入/输出接口连接到系统总线。其中，该中央控制设备的处理器用于提供计算和控制能力。该中央控制设备的存储器包括非易失性存储介质和内存储器。该非易失性存储介质存储有操作系统和计算机程序。该内存储器为非易失性存储介质中的操作系统和计算机程序的运行提供环境。该中央控制设备的输入/输出接口用于处理器与外部设备之间交换信息。该中央控制设备的通信接口用于与外部的终端进行有线或无线方式的通信，无线方式可通过WIFI、移动蜂窝网络、NFC(近场通信)或其他技术实现。该计算机程序被处理器执行时以实现一种核电厂工业控制系统网络安全的全局数据控制方法。该中央控制设备的显示单元用于形成视觉可见的画面，可以是显示屏、投影装置或虚拟现实成像装置。显示屏可以是液晶显示屏或者电子墨水显示屏，该中央控制设备的输入装置可以是显示屏上覆盖的触摸层，也可以是中央控制设备外壳上设置的按键、轨迹球或触控板，还可以是外接的键盘、触控板或鼠标等。
本领域技术人员可以理解，图11中示出的结构，仅仅是与本申请方案相关的部分结构的框图，并不构成对本申请方案所应用于其上的中央控制设备的限定，具体的中央控制设备可以包括比图中所示更多或更少的部件，或者组合某些部件，或者具有不同的部件布置。
在一个实施例中，提供了一种中央控制设备，包括存储器和处理器，存储器中存储有计算机程序，该处理器执行计算机程序时实现以下步骤：
获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
在一个实施例中，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取各核电工业控制系统集群的运行数据；
其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
在一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在一个实施例中，通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区， 包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，第一控制侧隔离装置位于核电厂内管辖区的生产区和办公区之间，第二控制侧隔离装置位于核电厂内管辖区的办公区与核电厂外管辖区之间，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
在一个实施例中，依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
在一个实施例中，每一核电工业控制系统集群包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至数据汇总设备；相应的，处理器执行计算机程序时还实现以下步骤：
通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的数据汇总设备中获取各核电工业控制系统集群的运行数据。
在一个实施例中，核电管理服务器集群包括：数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器中的至少一种。
在一个实施例中，提供了一种计算机可读存储介质，其上存储有计算机程序，计算机程序被处理器执行时实现以下步骤：
获取核电管理服务器集群的核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
对运行数据和核电管理数据进行处理，得到核电厂的全局控制数据；
通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
在一个实施例中，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取各核电工业控制系统集群的运行数据；
其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
在一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在一个实施例中，通过控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，第一控制侧隔离装置位于核电厂内管辖区的生产区和办公区之间，第二控制侧隔离装置位于核电厂内管辖区的办公区与核电厂外管辖区之间，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
在一个实施例中，依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
依次通过第一控制侧隔离装置和第二控制侧隔离装置，将全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
在一个实施例中，每一核电工业控制系统集群包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至数据汇总设备；相应的，通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的数据汇总设备中获取各核电工业控制系统集群的运行数据。
在一个实施例中，核电管理服务器集群包括：数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器中的至少一 种。
在一个实施例中，提供了一种核电厂工业控制系统网络安全的全局数据控制系统。系统包括：中央控制设备、核电管理服务器集群、至少两个核电工业控制系统集群、位于相邻核电站系统集群之间的集群空间隔离装置、各核电站系统集群的系统集群端口侧隔离装置；以及控制侧隔离装置；
核电管理服务器集群用于存储核电管理数据；核电管理数据包括核电厂工业控制系统的网络安全数据；
各核电工业控制系统集群用于存储各核电工业控制系统集群的运行数据；
中央控制设备用于执行上述任意实施例所述的核电厂工业控制系统网络安全的全局数据控制方法的步骤。
在一个实施例中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且安全等级与系统集群端口侧隔离装置的数据单向传输隔离能力强成正比。
在一个实施例中，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且安全等级的相似度与集群空间隔离装置的数据单向传输隔离能力成反比。
在一个实施例中，控制侧隔离装置包括位于核电厂内管辖区的生产区和办公区之间的第一控制侧隔离装置，以及位于核电厂内管辖区与核电厂外管辖区之间的第二控制侧隔离装置，且第一控制侧隔离装置的数据单向传输隔离能力高于第二控制侧隔离装置。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，的计算机程序可存储于一非易失性计算机可读取存储介质中，该计算机程序在执行时，可包括如上述各方法的实施例的流程。其中，本申请所提供的各实施例中所使用的对存储器、数据库或其它介质的任何引用，均可包括非易失性和易失性存储器中的至少一种。非易失性存储器可包括只读存储器(Read-Only Memory，ROM)、磁带、软盘、闪存、光存储器、高密度嵌入式非易失性存储器、阻变存储器(ReRAM)、磁变存储器(Magnetoresistive Random Access Memory，MRAM)、铁电存储器(Ferroelectric Random Access Memory，FRAM)、相变存储器(Phase Change Memory，PCM)、石墨烯存储器等。易失性存储器可包括随机存取存储器(Random Access Memory，RAM)或外部高速缓冲存储器等。作为说明而非局限，RAM可以是多种形式，比如静态随机存取存储器(Static Random Access Memory，SRAM)或动态随机存取存储器(Dynamic Random Access Memory，DRAM)等。本申请所提供的各实施例中所涉及的数据库可包括关系型数据库和非关系型数据库中至少一种。非关系型数据库可包括基于区块链的分布式数据库等，不限于此。本申请所提供的各实施例中所涉及的处理器可为通用处理器、中央处理器、图形处理器、数字信号处理器、可编程逻辑器、基于量子计算的数据处理逻辑器等，不限于此。
以上实施例的各技术特征可以进行任意的组合，为使描述简洁，未对上述实施例中的各个技术特征所有可能的组合都进行描述，然而，只要这些技术特征的组合不存在矛盾，都应当认为是本说明书记载的范围。
以上实施例仅表达了本申请的几种实施方式，其描述较为具体和详细，但并不能因此而理解为对本申请专利范围的限制。应当指出的是，对于本领域的普通技术人员来说，在不脱离本申请构思的前提下，还可以做出若干变形和改进，这些都属于本申请的保护范围。因此，本申请的保护范围应以所附权利要求为准。

Claims (14)

  1. 核电厂工业控制系统网络安全的全局数据控制方法，其特征在于，所述方法包括：
    获取核电管理服务器集群的核电管理数据；所述核电管理数据包括核电厂工业控制系统的网络安全数据；
    通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
    对所述运行数据和所述核电管理数据进行处理，得到核电厂的全局控制数据；
    通过控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
  2. 根据权利要求1所述的方法，其特征在于，所述通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
    通过各核电工业控制系统集群对应的系统集群端口侧隔离装置，获取所述各核电工业控制系统集群的运行数据；
    其中，各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且所述安全等级与所述系统集群端口侧隔离装置的数据单向传输隔离能力成正比。
  3. 根据权利要求1所述的方法，其特征在于，
    相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且所述安全等级的相似度与所述集群空间隔离装置的数据单向传输隔离能力成反比。
  4. 根据权利要求1所述的方法，其特征在于，所述通过控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
    依次通过第一控制侧隔离装置和第二控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区；其中，所述第一控制侧隔离装置位于所述核电厂内管辖区的生产区和办公区之间，所述第二控制侧隔离装置位于所述核电厂内管辖区的办公区与所述核电厂外管辖区之间，且所述第一控制侧隔离装置的数据单向传输隔离能力高于所述第二控制侧隔离装置。
  5. 根据权利要求4所述的方法，其特征在于，所述依次通过第一控制侧隔离装置和第二控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区，包括：
    依次通过第一控制侧隔离装置和第二控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区的第一上级核电管理设备，以使第一上级核电管理设备通过第一控制侧隔离装置，将所述全局控制数据传输至核电厂外管辖区的第二上级核电管理设备。
  6. 根据权利要求1-5中任一项所述的方法，其特征在于，每一核电工业控制系统集群包括：至少两个核电工业控制系统和数据汇总设备，且各核电工业控制系统通过系统数据隔离装置，将本地产生的运行数据传输至所述数据汇总设备；
    相应的，所述通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据，包括：
    通过系统集群端口侧隔离装置，获取从各核电工业控制系统集群的所述数据汇总设备中获取各核电工业控制系统集群的运行数据。
  7. 根据权利要求1-5中任一项所述的方法，其特征在于，所述核电管理服务器集群包括：数据存储服务器、数据分析服务器、数据接口服务器、终端安全服务器、病毒与补丁服务器、应急平台服务器、账户管理服务器和威胁情报服务器中的至少一种。
  8. 一种核电厂工业控制系统网络安全的全局数据控制装置，其特征在于，所述装置包括：
    管理数据获取模块，用于获取核电管理服务器集群的核电管理数据；所述核电管理数据包括核电厂工业控制系统的网络安全数据；
    运行数据获取模块，用于通过系统集群端口侧隔离装置，获取至少两个核电工业控制系统集群的运行数据；其中，相邻核电站系统集群之间配置有集群空间隔离装置；
    全局数据确定模块，用于对所述运行数据和所述核电管理数据进行处理，得到核电厂的全局控制数据；
    数据传输模块，用于通过控制侧隔离装置，将所述全局控制数据从核电厂内管辖区传输至核电厂外管辖区。
  9. 一种中央控制设备，包括存储器和处理器，所述存储器存储有计算机程序，其特征在于，所述处理器执行所述计算机程序时实现权利要求1至7中任一项所述的方法的步骤。
  10. 一种计算机可读存储介质，其上存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现权利要求1至7中任一项所述的方法的步骤。
  11. 一种核电厂工业控制系统网络安全的全局数据控制系统，其特征在于，所述系统包括：中央 控制设备、核电管理服务器集群、至少两个核电工业控制系统集群、位于相邻核电站系统集群之间的集群空间隔离装置、各核电站系统集群的系统集群端口侧隔离装置；以及控制侧隔离装置；
    所述核电管理服务器集群用于存储核电管理数据；所述核电管理数据包括核电厂工业控制系统的网络安全数据；
    各核电工业控制系统集群用于存储各核电工业控制系统集群的运行数据；
    所述中央控制设备用于执行权利要求1至7中任一项所述的方法的步骤。
  12. 根据权利要求11所述的系统，其特征在于，所述各核电工业控制系统集群对应的系统集群端口侧隔离装置，根据各核电工业控制系统集群的安全等级确定，且所述安全等级与所述系统集群端口侧隔离装置的数据单向传输隔离能力强成正比。
  13. 根据权利要求11所述的系统，其特征在于，相邻核电站系统集群之间配置的集群空间隔离装置，根据相邻核电站系统集群的安全等级的相似度确定；且所述安全等级的相似度与所述集群空间隔离装置的数据单向传输隔离能力成反比。
  14. 根据权利要求11所述的系统，其特征在于，所述控制侧隔离装置包括位于所述核电厂内管辖区的生产区和办公区之间的第一控制侧隔离装置，以及位于所述核电厂内管辖区与所述核电厂外管辖区之间的第二控制侧隔离装置，且所述第一控制侧隔离装置的数据单向传输隔离能力高于所述第二控制侧隔离装置。
PCT/CN2023/110486 2023-02-24 2023-08-01 核电厂工业控制系统网络安全的全局数据控制方法和装置 WO2024037328A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202310207102.XA CN116300737A (zh) 2023-02-24 2023-02-24 核电厂工业控制系统网络安全的全局数据控制方法和装置
CN202310207102.X 2023-02-24

Publications (1)

Publication Number Publication Date
WO2024037328A1 true WO2024037328A1 (zh) 2024-02-22

Family

ID=86833629

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/110486 WO2024037328A1 (zh) 2023-02-24 2023-08-01 核电厂工业控制系统网络安全的全局数据控制方法和装置

Country Status (2)

Country Link
CN (1) CN116300737A (zh)
WO (1) WO2024037328A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116300737A (zh) * 2023-02-24 2023-06-23 中广核工程有限公司 核电厂工业控制系统网络安全的全局数据控制方法和装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202261357U (zh) * 2011-11-06 2012-05-30 广东省电力调度中心 复杂网络环境数据安全传输系统
US20180075083A1 (en) * 2016-09-09 2018-03-15 Sap Se Global Database Transaction Management Service
CN112086214A (zh) * 2020-09-23 2020-12-15 中国核动力研究设计院 一种核电站关键设备远程状态监视与智能诊断平台
CN212811757U (zh) * 2020-07-01 2021-03-26 云南电网有限责任公司 一种电网小电调度信息无线多路访问智能管理系统
CN116300737A (zh) * 2023-02-24 2023-06-23 中广核工程有限公司 核电厂工业控制系统网络安全的全局数据控制方法和装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202261357U (zh) * 2011-11-06 2012-05-30 广东省电力调度中心 复杂网络环境数据安全传输系统
US20180075083A1 (en) * 2016-09-09 2018-03-15 Sap Se Global Database Transaction Management Service
CN212811757U (zh) * 2020-07-01 2021-03-26 云南电网有限责任公司 一种电网小电调度信息无线多路访问智能管理系统
CN112086214A (zh) * 2020-09-23 2020-12-15 中国核动力研究设计院 一种核电站关键设备远程状态监视与智能诊断平台
CN116300737A (zh) * 2023-02-24 2023-06-23 中广核工程有限公司 核电厂工业控制系统网络安全的全局数据控制方法和装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
YAN HUAICHAO, CHEN ZHENGXI: "Research on Overall Solution of Industrial Cyber Security in Nuclear Power Industry", NUCLEAR SAFETY., vol. 19, no. 3, 1 June 2020 (2020-06-01), pages 53 - 58, XP093140171, DOI: 10.16432/j.cnki.1672-5360.2020.03.007 *

Also Published As

Publication number Publication date
CN116300737A (zh) 2023-06-23

Similar Documents

Publication Publication Date Title
Finogeev et al. The convergence computing model for big sensor data mining and knowledge discovery
US9652723B2 (en) Electrical transformer failure prediction
Shan et al. An emergency response decision support system framework for application in e-government
CN104376430A (zh) 一种基于云服务平台的风险隐患管理系统及其实现方法
WO2024037328A1 (zh) 核电厂工业控制系统网络安全的全局数据控制方法和装置
US10129373B2 (en) Recovery of a network infrastructure to facilitate business continuity
CN104463759A (zh) 基于数字预案的决策指挥一体机及其运行方法
WO2020134361A1 (zh) 变电站二次设备状态评估方法、系统及设备
CN112598368A (zh) 污水处理在线监管平台
CN104464272A (zh) 智能运维管理系统
CN112787890B (zh) 区块链监测系统
CN103595815A (zh) 基于云计算的存储资源分配方法
US20220058745A1 (en) System and method for crowdsensing-based insurance premiums
CN110532312A (zh) 一种基于大数据的工业互联云平台系统
CN116596281B (zh) 一种轻量化三维物业管理系统
Jin et al. A simulation study for emergency/disaster management by applying complex networks theory
CN106528487A (zh) 一种智能计算机机房管理系统
CN110209903A (zh) 一种基于大数据的工业互联云平台系统
US11858356B2 (en) System and method for managing energy consumption across electric vehicle fleets with telematic devices in a computing environment
CN109522349A (zh) 跨类型数据计算及共享方法、系统、设备
CN112104507B (zh) 发电企业网络安全的监测方法、系统、设备及介质
CN115048458A (zh) 基于区块链的数据处理方法、装置、设备、介质和程序产品
CN115499327A (zh) 三维可视化数据中心管理的方法、设备、介质及程序产品
CN114363079A (zh) 一种云平台的分布式智能数据监管系统
Fazio et al. HSCLOUD: cloud architecture for supporting homeland security

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23854232

Country of ref document: EP

Kind code of ref document: A1