数字化变电站系统的可靠性与安全性研究
|
摘要
电子式互感器、智能断路器的诞生使建设数字化变电站成为可能,高速、可靠和开放的通信网络及完备的通信系统标准为实现数字化变电站提供保障,尤其是最新颁布的变电站通信网络与系统的国际标准IEC 61850为数字化变电站提供了全面的建设规范。这些新技术的发展使变电站自动化系统走向全数字化成为必然。
与常规变电站系统相比,数字化变电站系统具有一系列显著的优点。但作为一种新型系统,现阶段数字化变电站系统依然存在很多问题,如可靠性和安全性。目前,国内、外对常规变电站自动化系统的可靠性已做了较多研究,但对数字化变电站系统的相关研究开展的还很少。因此,建立数字化变电站系统的可靠性分析模型并对整个数字化变电站系统的可靠性进行综合评价,对于数字化变电站系统的设计和运行具有重要意义。现有的变电站系统安全分析方法大多数停留在定性分析层面上,鲜有分析具体安全策略对系统安全性的贡献大小。因此,寻找一种综合定量分析数字化变电站系统安全性的方法,对于数字化变电站系统安全运行同样具有重要的意义。
本文首先介绍了数字化变电站基本特征及相关课题研究现状。分析了数字化变电站内智能电子装置的结构特点及其可靠性模型,并利用马尔科夫状态法对装置的可靠性参数进行分析计算。文中详细阐述了IEC 62439-3标准的典型技术特征,并阐释了其支持网络无扰恢复的技术原理。然后将IEC 62439-3内的网络冗余方案应用于过程总线,并与传统保护系统相比,分析采用不同过程总线的全数字化保护系统的结构,利用可靠性框图对不同结构的保护系统可靠性参数进行详细的计算和分析。针对现有的变电站可靠性分析方法的不足,本文提出一种综合计算数字化变电站全站可靠性的方法,并利用该方法对一典型的数字化变电站系统的可靠性参数进行分析计算。
最后,本文详细分析了数字化变电站内网络安全的主要威胁、网络安全需求以及对应的网络安全策略。在此基础上,综合可靠性理论与分布式系统脆弱性理论,介绍了一种综合定量分析数字化变电站系统安全性的方法。并以一典型的变压器保护内的断路器为目标节点,利用该方法分析数字化变电站通信系统的安全性模型。
The electronic transformer and the intelligent switchgear make the digital substation possbile. The comprehensive communication system standard is the ensurance to achieve the digital substation. The latest issued IEC 61850 standard provides a comprehensive construction specification for the digital substation. These new technologies make the digital substation become inevitable.
Compared with the conventional substation system, the digital substation system possesses a series of significant advantages. However, there are still many issues existed in it, such as its reliability and security issues. Up to now, there are a lot of researches on the conventional substation system reliability, seldom on the digital substation system. So establishing the reliability model of the digital substation system and evaluating the reliability of the entire system have a great significance for the design and operation of the digital substation. And the existing digital substation system security analysis methods almost focus on the qualitative analysis of the security policies, seldom on quantitative analysis the contribution of those security policies to the system security level. Therefore, establishing the digital substation system security analysis model also has a great significance for the safety operation of the substation.
This paper introduces the basic features of the digital substation. Then, it analyzes the architecture characteristics and the reliability model of intelligent electronic devices within the digital substation, and uses the Markov state method to analyze and calculate the reliability parameters of the device. This paper also describes the typical technical characteristics of IEC 62439-3 standard, and introduces the main technical principles that support the network bumpless recovery. And then it applies IEC 62439-3 to the process bus. Compared with the traditional protection system, it analyzes alternative all-digital protection systems which utilize different process buses. Afterwards, it uses the reliability block diagram to calculate the reliability indices of those protection systems. The existing reliability analysis methods are almost direct for a single device or a single bay unit, rarely for the entire substation system. Therefore this paper presents a method to calculate the reliability parameters of the entire substation. Then the reliability parameters of a typical digital substation are analyzed and calculated.
Finally, the paper introduces the major threats of the network security, the needs of the network security and the corresponding policies of the network security. Then combined the reliability theory and the vulnerability theory of the distributed systems, it presents a comprehensive approach to quantitative analyze the digital substation system security. Afterwards, it uses the method to analyze the security model of the digital substation communication system.
与常规变电站系统相比,数字化变电站系统具有一系列显著的优点。但作为一种新型系统,现阶段数字化变电站系统依然存在很多问题,如可靠性和安全性。目前,国内、外对常规变电站自动化系统的可靠性已做了较多研究,但对数字化变电站系统的相关研究开展的还很少。因此,建立数字化变电站系统的可靠性分析模型并对整个数字化变电站系统的可靠性进行综合评价,对于数字化变电站系统的设计和运行具有重要意义。现有的变电站系统安全分析方法大多数停留在定性分析层面上,鲜有分析具体安全策略对系统安全性的贡献大小。因此,寻找一种综合定量分析数字化变电站系统安全性的方法,对于数字化变电站系统安全运行同样具有重要的意义。
本文首先介绍了数字化变电站基本特征及相关课题研究现状。分析了数字化变电站内智能电子装置的结构特点及其可靠性模型,并利用马尔科夫状态法对装置的可靠性参数进行分析计算。文中详细阐述了IEC 62439-3标准的典型技术特征,并阐释了其支持网络无扰恢复的技术原理。然后将IEC 62439-3内的网络冗余方案应用于过程总线,并与传统保护系统相比,分析采用不同过程总线的全数字化保护系统的结构,利用可靠性框图对不同结构的保护系统可靠性参数进行详细的计算和分析。针对现有的变电站可靠性分析方法的不足,本文提出一种综合计算数字化变电站全站可靠性的方法,并利用该方法对一典型的数字化变电站系统的可靠性参数进行分析计算。
最后,本文详细分析了数字化变电站内网络安全的主要威胁、网络安全需求以及对应的网络安全策略。在此基础上,综合可靠性理论与分布式系统脆弱性理论,介绍了一种综合定量分析数字化变电站系统安全性的方法。并以一典型的变压器保护内的断路器为目标节点,利用该方法分析数字化变电站通信系统的安全性模型。
The electronic transformer and the intelligent switchgear make the digital substation possbile. The comprehensive communication system standard is the ensurance to achieve the digital substation. The latest issued IEC 61850 standard provides a comprehensive construction specification for the digital substation. These new technologies make the digital substation become inevitable.
Compared with the conventional substation system, the digital substation system possesses a series of significant advantages. However, there are still many issues existed in it, such as its reliability and security issues. Up to now, there are a lot of researches on the conventional substation system reliability, seldom on the digital substation system. So establishing the reliability model of the digital substation system and evaluating the reliability of the entire system have a great significance for the design and operation of the digital substation. And the existing digital substation system security analysis methods almost focus on the qualitative analysis of the security policies, seldom on quantitative analysis the contribution of those security policies to the system security level. Therefore, establishing the digital substation system security analysis model also has a great significance for the safety operation of the substation.
This paper introduces the basic features of the digital substation. Then, it analyzes the architecture characteristics and the reliability model of intelligent electronic devices within the digital substation, and uses the Markov state method to analyze and calculate the reliability parameters of the device. This paper also describes the typical technical characteristics of IEC 62439-3 standard, and introduces the main technical principles that support the network bumpless recovery. And then it applies IEC 62439-3 to the process bus. Compared with the traditional protection system, it analyzes alternative all-digital protection systems which utilize different process buses. Afterwards, it uses the reliability block diagram to calculate the reliability indices of those protection systems. The existing reliability analysis methods are almost direct for a single device or a single bay unit, rarely for the entire substation system. Therefore this paper presents a method to calculate the reliability parameters of the entire substation. Then the reliability parameters of a typical digital substation are analyzed and calculated.
Finally, the paper introduces the major threats of the network security, the needs of the network security and the corresponding policies of the network security. Then combined the reliability theory and the vulnerability theory of the distributed systems, it presents a comprehensive approach to quantitative analyze the digital substation system security. Afterwards, it uses the method to analyze the security model of the digital substation communication system.
引文
[1]曾庆禹.电力系统数字光电量测系统的原理及技术[J].电网技术,2001,25(4):1-5
[2]曾庆禹.电力系统数字光电量测系统的应用及效益分析[J].电网技术,2001,25(5):6-9
[3]谢希仁.计算机网络(第四版)[M].北京:电子工业出版社,2003
[4]张奇智,尹汝波.交换式工业以太网的现状和研究[J].传感器世界,2005,2:34-39
[5] Skeie T,Johannessen S,Brunner C.Ethernet in substation automation[J].Control Systems Magazine,IEEE,2002,22(3):43-51
[6] IEC.IEC 61850:Communication networks and systems in substations[S].2004
[7]谭文恕.远动的无缝通信系统体系结构[J].电网技术,2001,25(8):7-10
[8]高翔,张沛超.数字化变电站主要技术特征和关键技术[J].电网技术,2006,30(24):67-71
[9]高翔.数字化变电站应用展望[J].华东电力,2006,34(8),47-53
[10]樊唯钦.数字化变电站的发展与应用[J].电网技术,30(增刊),97-99
[11]张沛超,高翔.数字化变电站系统结构[J].电网技术,2006,30(24):73-77
[12] Reliability Test System Task Force.IEEE reliability test system[J].IEEE Trans.on PWRS,1999,14(3):1010-1020
[13]别朝红,王锡凡.蒙特卡洛法在评估电力系统可靠性中的应用[J].电力系统自动化,1997,21(6):68-75
[14] Gubbala N,Singh C.Models and considerations for parallel implementation of Monte Carlo simulation methods for power system reliability evaluation[J].IEEE Transactions on Power Systems,1995,10(2):779-787
[15]赵渊,周家启,周念成等.大电力系统可靠性评估的解析计算模型[J].中国电机工程学报,2006,26(5):19-25
[16]王刚,丁茂生,李晓华等.数字继电保护装置可靠性研究[J].中国电机工程学报,2004,24(7):47-52
[17] Anderson P M,Ghajar R F,Chintaluri G M,et al.An improved reliability model for redundant protective systems -Markov models[J].IEEE Trans.on Power System,1997,12(2):573-578
[18]张沛超,高翔.全数字化保护系统的可靠性及元件重要度分析[J].中国电机工程学报,2008,28(1):77-82
[19] G. Ericsson. Toward a Framework for Managing Information Security for an Electric Power Utility– CIGRE Experiences[J].IEEE Transactions on Power Delivery,2007 22(3):1461–1469
[20] G. Ericsson, A. Torkilseng. Management of information security for an electric power utility– On security domains and use of ISO/IEC 17799 standard[J]. IEEE Transactions on Power Delivery. 2005 20(2): 683–690
[21] IEC.IEC 62351:Data and Communication Security [S].2005
[22] Instrumentation, systems and automation society (ISA). ISA-TR99.00.01 Security technologies for manufacturing and control system[TR]. 2004
[23] Critical Infrastructure Protection Committee (CIPC) of NERC. Security Guidelines for the Electricity Sector [OL].[2007]. http://www.nerc.com/~filez/cipfiles.html
[24]廖建容,段斌,谭步学等.基于口令的变电站数据与通信安全认证[J].电力系统自动化,2007,31(10):71-75
[25]刘念,段斌.IEC 60870-5-104远动协议的一种安全报文探讨[J].电力系统自动化,2005,29(2):93-96
[26]段斌,王键.变电站自动化信息交换安全认证体系[J].电力系统自动化,2005,29(9):55-59
[27]胡炎,谢小荣,辛耀中.一种定量化的电力信息系统安全体系设计方法[J].电网技术,2006,30(2):7-13
[28]胡炎,谢小荣,辛耀中.电力信息系统建模和定量安全评估[J],电力系统自动化,2005,29(10): 30-35
[29]胡炎,辛耀中,韩英铎.二次系统安全体系结构化设计方法[J],电力系统自动化,2003,27(21):63-68
[30]杨文征,郭创新,曹一家等.数字化变电站信息安全分析及其防范措施研究[J].机电工程,2007,24(9):94-97
[31]吴匡威.数字化变电站中信息处理及网络信息安全分析[J].继电器,2007,35(12):18-22
[32]莫峻,谭建成.基于IEC61850的变电站网络安全分析[J].电力系统通信,2009 ,30(198):12-16
[33]丁杰,奚后玮,陈爱林等.基于IEC62351安全体系的变电站自动化系统[J].电网技术,2006, 30(增刊):345-348
[34] IEC.IEC 61850-5:Communication networks and systems in substations:Part 5:Communication requirements for functions and device models[S],2003
[35] IEC.IEC 60870-4:Telecontrol equipment and systems:Part 4-Performance requirements [S],1990 (www.iec.ch)
[36]吴在军,胡敏强.基于IEC 61850标准的变电站自动化系统研究[J],电网技术,2003,27(10):61-65
[37]电子设备可靠性预计手册[S].GJB/Z299C-2006
[38]所旭,张萍.微机继电保护软件可靠性探讨[J].继电器,2004,30(12):43-46
[39]睦俊华,范灵春,张海盛.软件可靠性预测技术研究[J].计算机工程,32(l):67-71
[40] Norman F. Sehneidewind. Standardization of Software Reliability Estimation and Prediction: Application to Space Systems. IEEE Software: 94-96
[41] Norman P. Schneidewind and T.W.Keller. Application of Reliability Models to the Space Shuttle,.IEEE Software.July,1992:22-33
[42] JohnD.MUSA.The Measurement and Management of Software Reliability Source : Proceedings of the IEEE,1980,68(9):31-43
[43] Bowels.J.B. A combined hardware, software and usage model of network reliability and availability.1990.Proceedings of Ninth Annual International Phoenix Conference on computers and communiaction.21-23 ,March 1990 :649-654
[44]林湘宁,刘沛,杨春明等.基于小波分析的超高压输电线路无通讯全线速动保护方案[J].中国电机工程学报,2001,21(6):9-14
[45]周玉兰,王水俊,舒治淮.2002全国继电保护与安全自动装置运行情况[J].电网技术,2003,27(9):55-60
[46] IEEE.802.1W-IEEE Standard for local and metropolitan area networks : Media Access Control (MAC) Bridges-Amendment 2:Rapid Reconfiguration[S].2001
[47] IEC.IEC 62439: Industrial communication networks: high availability automation networks [S], 2008
[48] M. Rausand, A. Hoyland, System reliability theory: models, statistical methods, and applications[M]. John Wiley Sons, 2004
[49]徐立子.变电站自动化系统的可靠性分析[J].电网技术,2002,26(8):68-72
[50] P. M. Anderson, S. K. Agarwal, An improved model for protective system reliability[J]. IEEE Trans. Rel., vol. 41, no. 3, Sept. 1992 : 422-426
[51] Lars Andersson, Klaus-Peter Brand, Christoph Brunner, et al. Reliability investigations for SA communication architectures based on IEC 61850[C], Power Tech IEEE Russia,2005
[52]张沛超,高翔,顾黄晶等.全数字化保护系统的主要问题及解决方案[J].电力自动化设备,2007,27(4):104-107
[53] IEC.IEC 61508:Functional Safety of Programmable Electronic Safety Related Systems[S], 2005
[54]冯萍慧,连一峰,戴英侠等.基于可靠性理论的分布式系统脆弱性模型[J].软件学报,2006,17 (7):1633-1640
[55] ORTALO R , DESWARTE Y, KAANICHE M. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Trans on Software Engineering,1999,5 (5):633-650
[56]方来华,吴宗之,刘骥等.基于可靠性框图法的安全功能失效概率定量分析[J].化工自动化及仪表,2008,35(2):32-35
[57] DZUNG D , NAEDEL E M , VONHOFF T , et al . Security for industrial communication systems. Proceedings of the IEEE ,2005 , 93 (6) : 1152-1177
[58] IEC.IEC 61850-7-2:Communication networks and systems in substations:basic communication structure for substation and feeder equipment-abstract communication service interface[S],2003
[59]刘念,张建华,段斌等.网络环境下变电站自动化通信系统脆弱性评估[J].电力系统自动化,2008,32(8):28-33
[2]曾庆禹.电力系统数字光电量测系统的应用及效益分析[J].电网技术,2001,25(5):6-9
[3]谢希仁.计算机网络(第四版)[M].北京:电子工业出版社,2003
[4]张奇智,尹汝波.交换式工业以太网的现状和研究[J].传感器世界,2005,2:34-39
[5] Skeie T,Johannessen S,Brunner C.Ethernet in substation automation[J].Control Systems Magazine,IEEE,2002,22(3):43-51
[6] IEC.IEC 61850:Communication networks and systems in substations[S].2004
[7]谭文恕.远动的无缝通信系统体系结构[J].电网技术,2001,25(8):7-10
[8]高翔,张沛超.数字化变电站主要技术特征和关键技术[J].电网技术,2006,30(24):67-71
[9]高翔.数字化变电站应用展望[J].华东电力,2006,34(8),47-53
[10]樊唯钦.数字化变电站的发展与应用[J].电网技术,30(增刊),97-99
[11]张沛超,高翔.数字化变电站系统结构[J].电网技术,2006,30(24):73-77
[12] Reliability Test System Task Force.IEEE reliability test system[J].IEEE Trans.on PWRS,1999,14(3):1010-1020
[13]别朝红,王锡凡.蒙特卡洛法在评估电力系统可靠性中的应用[J].电力系统自动化,1997,21(6):68-75
[14] Gubbala N,Singh C.Models and considerations for parallel implementation of Monte Carlo simulation methods for power system reliability evaluation[J].IEEE Transactions on Power Systems,1995,10(2):779-787
[15]赵渊,周家启,周念成等.大电力系统可靠性评估的解析计算模型[J].中国电机工程学报,2006,26(5):19-25
[16]王刚,丁茂生,李晓华等.数字继电保护装置可靠性研究[J].中国电机工程学报,2004,24(7):47-52
[17] Anderson P M,Ghajar R F,Chintaluri G M,et al.An improved reliability model for redundant protective systems -Markov models[J].IEEE Trans.on Power System,1997,12(2):573-578
[18]张沛超,高翔.全数字化保护系统的可靠性及元件重要度分析[J].中国电机工程学报,2008,28(1):77-82
[19] G. Ericsson. Toward a Framework for Managing Information Security for an Electric Power Utility– CIGRE Experiences[J].IEEE Transactions on Power Delivery,2007 22(3):1461–1469
[20] G. Ericsson, A. Torkilseng. Management of information security for an electric power utility– On security domains and use of ISO/IEC 17799 standard[J]. IEEE Transactions on Power Delivery. 2005 20(2): 683–690
[21] IEC.IEC 62351:Data and Communication Security [S].2005
[22] Instrumentation, systems and automation society (ISA). ISA-TR99.00.01 Security technologies for manufacturing and control system[TR]. 2004
[23] Critical Infrastructure Protection Committee (CIPC) of NERC. Security Guidelines for the Electricity Sector [OL].[2007]. http://www.nerc.com/~filez/cipfiles.html
[24]廖建容,段斌,谭步学等.基于口令的变电站数据与通信安全认证[J].电力系统自动化,2007,31(10):71-75
[25]刘念,段斌.IEC 60870-5-104远动协议的一种安全报文探讨[J].电力系统自动化,2005,29(2):93-96
[26]段斌,王键.变电站自动化信息交换安全认证体系[J].电力系统自动化,2005,29(9):55-59
[27]胡炎,谢小荣,辛耀中.一种定量化的电力信息系统安全体系设计方法[J].电网技术,2006,30(2):7-13
[28]胡炎,谢小荣,辛耀中.电力信息系统建模和定量安全评估[J],电力系统自动化,2005,29(10): 30-35
[29]胡炎,辛耀中,韩英铎.二次系统安全体系结构化设计方法[J],电力系统自动化,2003,27(21):63-68
[30]杨文征,郭创新,曹一家等.数字化变电站信息安全分析及其防范措施研究[J].机电工程,2007,24(9):94-97
[31]吴匡威.数字化变电站中信息处理及网络信息安全分析[J].继电器,2007,35(12):18-22
[32]莫峻,谭建成.基于IEC61850的变电站网络安全分析[J].电力系统通信,2009 ,30(198):12-16
[33]丁杰,奚后玮,陈爱林等.基于IEC62351安全体系的变电站自动化系统[J].电网技术,2006, 30(增刊):345-348
[34] IEC.IEC 61850-5:Communication networks and systems in substations:Part 5:Communication requirements for functions and device models[S],2003
[35] IEC.IEC 60870-4:Telecontrol equipment and systems:Part 4-Performance requirements [S],1990 (www.iec.ch)
[36]吴在军,胡敏强.基于IEC 61850标准的变电站自动化系统研究[J],电网技术,2003,27(10):61-65
[37]电子设备可靠性预计手册[S].GJB/Z299C-2006
[38]所旭,张萍.微机继电保护软件可靠性探讨[J].继电器,2004,30(12):43-46
[39]睦俊华,范灵春,张海盛.软件可靠性预测技术研究[J].计算机工程,32(l):67-71
[40] Norman F. Sehneidewind. Standardization of Software Reliability Estimation and Prediction: Application to Space Systems. IEEE Software: 94-96
[41] Norman P. Schneidewind and T.W.Keller. Application of Reliability Models to the Space Shuttle,.IEEE Software.July,1992:22-33
[42] JohnD.MUSA.The Measurement and Management of Software Reliability Source : Proceedings of the IEEE,1980,68(9):31-43
[43] Bowels.J.B. A combined hardware, software and usage model of network reliability and availability.1990.Proceedings of Ninth Annual International Phoenix Conference on computers and communiaction.21-23 ,March 1990 :649-654
[44]林湘宁,刘沛,杨春明等.基于小波分析的超高压输电线路无通讯全线速动保护方案[J].中国电机工程学报,2001,21(6):9-14
[45]周玉兰,王水俊,舒治淮.2002全国继电保护与安全自动装置运行情况[J].电网技术,2003,27(9):55-60
[46] IEEE.802.1W-IEEE Standard for local and metropolitan area networks : Media Access Control (MAC) Bridges-Amendment 2:Rapid Reconfiguration[S].2001
[47] IEC.IEC 62439: Industrial communication networks: high availability automation networks [S], 2008
[48] M. Rausand, A. Hoyland, System reliability theory: models, statistical methods, and applications[M]. John Wiley Sons, 2004
[49]徐立子.变电站自动化系统的可靠性分析[J].电网技术,2002,26(8):68-72
[50] P. M. Anderson, S. K. Agarwal, An improved model for protective system reliability[J]. IEEE Trans. Rel., vol. 41, no. 3, Sept. 1992 : 422-426
[51] Lars Andersson, Klaus-Peter Brand, Christoph Brunner, et al. Reliability investigations for SA communication architectures based on IEC 61850[C], Power Tech IEEE Russia,2005
[52]张沛超,高翔,顾黄晶等.全数字化保护系统的主要问题及解决方案[J].电力自动化设备,2007,27(4):104-107
[53] IEC.IEC 61508:Functional Safety of Programmable Electronic Safety Related Systems[S], 2005
[54]冯萍慧,连一峰,戴英侠等.基于可靠性理论的分布式系统脆弱性模型[J].软件学报,2006,17 (7):1633-1640
[55] ORTALO R , DESWARTE Y, KAANICHE M. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Trans on Software Engineering,1999,5 (5):633-650
[56]方来华,吴宗之,刘骥等.基于可靠性框图法的安全功能失效概率定量分析[J].化工自动化及仪表,2008,35(2):32-35
[57] DZUNG D , NAEDEL E M , VONHOFF T , et al . Security for industrial communication systems. Proceedings of the IEEE ,2005 , 93 (6) : 1152-1177
[58] IEC.IEC 61850-7-2:Communication networks and systems in substations:basic communication structure for substation and feeder equipment-abstract communication service interface[S],2003
[59]刘念,张建华,段斌等.网络环境下变电站自动化通信系统脆弱性评估[J].电力系统自动化,2008,32(8):28-33