CN111984999A - A safety management and control method and system for a power failure emergency repair system - Google Patents

Abstract

The invention discloses a safety management and control method and system for a power failure emergency repair system. The method includes: physically isolating the power failure emergency repair command platform according to the application environment of the power failure emergency repair command platform, the safety risk assessment result and the flow of business data; When exchanging, judge and filter the security level of business data; divide the physical layer of the power failure emergency repair command platform into different areas according to requirements, and formulate access control policies for each area according to user roles and business data flow between areas; Business data in different areas, obtain various logs from available business data, and generate audit reports; assign access rights according to user roles, geographic locations and security levels in different areas, and adjust user access rights according to user operation logs . By implementing the present invention, the safe operation of the power failure emergency repair command platform and the safety of business data are guaranteed.

Description

A safety management and control method and system for a power failure emergency repair system

technical field

The invention relates to the field of safety management and control of power emergency repair operation terminals, in particular to a safety management and control method and system for a power failure emergency repair system.

Background technique

Building a command platform for emergency repair of power failures through intelligent mobile terminal technology to achieve panoramic multi-dimensional display of power grid fault information in intelligent mobile terminals, which can effectively overcome the limitations of existing office methods, improve management level and work efficiency, and help managers at all levels and Operators can grasp the operation status of the power grid "anytime, anywhere", and realize diversified office work. As the power failure emergency repair command platform is an important support platform for power emergency repair, it involves a lot of related business systems, and includes a lot of important enterprise information and data. Therefore, the safety management and control of the power failure emergency repair command platform is proposed. Very demanding. Therefore, how to safely manage and control the power failure emergency repair command platform to ensure the safety of the system has become a problem that must be solved by the power failure emergency repair command platform.

SUMMARY OF THE INVENTION

Therefore, the technical problem to be solved by the present invention is to overcome the defect in the prior art that it is difficult to safely manage and control the power failure emergency repair command platform, thereby providing a safety management and control method and system for a power failure emergency repair system.

To achieve the above object, the present invention provides the following technical solutions:

In a first aspect, an embodiment of the present invention provides a safety management and control method for a power failure emergency repair system, including:

According to the application environment of the power failure emergency repair command platform, the results of safety risk assessment and the flow of business data, the power failure emergency repair command platform is physically isolated, the business data related to the Internet is deployed on the information extranet, and the business data related to the platform is deployed inside the platform. Information intranet, when the business data deployed in the information extranet is exchanged with the business data deployed in the information intranet, the security level of the business data is judged and filtered;

According to service assurance requirements, information security requirements and production safety requirements, the physical layer of the power failure emergency repair command platform is divided into key protection core areas, safety areas and basic safety areas. Deploy a network isolation device between the basic security zone, and formulate access control policies for each zone according to user roles and the flow of business data between zones. The user roles include: general users, business application administrators, system administrators, and leaders user;

Obtain business data in the key protection core area, security area, and basic security area, perform integrity verification according to business data constraints, obtain available business data, and obtain system operation logs, user operation logs, application logs from the available business data Database log and operating system log, and perform security audit on the system operation log, user operation log, application database log and operating system log, and generate an audit report. When an error or warning event occurs, locate the error according to the audit report. or warn the person responsible for the incident;

According to the user's role, geographical location and the security level of the key protection core area, security area and basic security area, the access rights are allocated based on the user role, and the user account information, user login time, logout time, access terminal address, The operation object and operation method are generated, the user operation log is generated, and the user's access authority is adjusted according to the user operation log.

In one embodiment, the performing security authentication and filtering on the service data includes:

Judging the security level of business data, when the business data is sensitive data, it is forbidden to exchange data between the business data deployed on the information extranet and the business data deployed on the information intranet;

When the business data is insensitive data, the business data is desensitized and then exchanged.

In one embodiment, the formulating an access control policy for each zone according to the user role and the business data flow between the zones includes:

When business data flows from the basic security zone to the security zone or from the security zone to the key protection core zone, allow system administrators and leading users to access the business data;

When business data flows from the security zone to the basic security zone or from the core protection zone to the security zone, all user roles are allowed to access the business data.

In one embodiment, the adjusting the user's access authority according to the user operation log includes:

According to the user account information and the locally stored user account information, when the comparison result is inconsistent, it is determined that the user account is the first login;

When the user account is the first login, the user's access authority is obtained according to the user account information, and the access authority includes: an object-level authority and a behavior-level authority, and the object-level authority is used to modify the behavior-level authority. Authority, the authority of the behavior level is used to obtain behavior data corresponding to the behavior level from the power failure emergency repair command platform;

When the user account is logged in for the first time, first determine whether the user has the object-level permission, when the user has the object-level permission, execute the permission, and return the modified behavior-level permission to the user, when the user has no object-level permission When the user has the permission of the behavior level, it is judged whether the user has the permission of the behavior level. When the user has the permission of the behavior level, the permission is executed, and the corresponding behavior data obtained by the permission of the behavior level is returned to the user;

When the user account is logged in for the first time, evaluate the behavior status of the user when the user executes the authority according to the user operation log, and adjust the user's access authority when it is determined that the behavior status of the user when the user executes the authority is abnormal;

According to the user account information and the locally stored user account information, when the comparison results are consistent, it is determined that the user account is not the first login, and the power failure repair command platform is accessed according to the established access policy.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

It adopts dual-device and dual-link mode to connect and communicate with the power failure emergency repair command platform. When any one of the lines fails, it will be shielded from the service list and switched to the normal line and the communication equipment supporting the normal line. After detecting the fault recovery, switch back to the original line and the original communication equipment matched with the original line, and record the fault information in the system operation log.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

The system running time and downtime are obtained according to the system operation log, and the system availability is obtained according to the system running time and the downtime. When the system availability is less than a preset threshold, a prompt message for background software and hardware architecture upgrade is generated.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

Obtain business data in the key protection core area, security area and basic security area, encrypt and store sensitive data in the business data using public key infrastructure as a key, and use data backup, mirroring technology and mirror server measures to monitor business operations. Data is backed up.

In a second aspect, an embodiment of the present invention provides a safety management and control system for a power failure emergency repair system, including:

The physical isolation module is used to physically isolate the power failure emergency repair command platform according to the application environment, security risk assessment results and business data flow of the power failure emergency repair command platform, and deploy the business data related to the Internet on the information extranet. The internal business data is deployed in the information intranet. When the business data deployed in the information extranet is exchanged with the business data deployed in the information intranet, the security level of the business data is judged and filtered;

The area division module is used to divide the physical layer of the power failure emergency repair command platform into key protection core areas, safety areas and basic safety areas according to service assurance requirements, information security requirements and production safety requirements. Deploy network isolation devices between zones, between security zones and basic security zones, and formulate access control policies for each zone according to user roles and the flow of business data between zones. The user roles include: general users, business application administrators , system administrators and leading users;

The security audit module is used to obtain business data in the key protection core area, security area and basic security area, perform integrity verification according to business data constraints, obtain available business data, and obtain system operation logs from the available business data. , user operation log, application database log and operating system log, and conduct security audits on the system operation log, user operation log, application database log and operating system log, and generate audit reports. The audit report identifies the person responsible for the error or warning event;

The permission assignment module is used to assign access permissions based on user roles, and record user account information, user login time, logout Time, access terminal address, operation object and operation method, generate a user operation log, and adjust the user's access authority according to the user operation log.

In a third aspect, an embodiment of the present invention provides a computer-readable storage medium, where the computer-readable storage medium stores computer instructions, and the computer instructions are used to cause the computer to execute the first aspect of the embodiment of the present invention. Safety management and control method of power failure emergency repair system.

In a fourth aspect, an embodiment of the present invention provides a computer device, including: a memory and a processor, the memory and the processor are connected in communication with each other, the memory stores computer instructions, and the processor executes the The computer instructions are executed to execute the safety management and control method of the power failure emergency repair system according to the first aspect of the embodiment of the present invention.

The technical scheme of the present invention has the following advantages:

The safety management and control method of the power failure emergency repair system provided by the present invention physically isolates the power failure emergency repair command platform according to the application environment of the power failure emergency repair command platform, the safety risk assessment result and the flow of business data, and deploys the business data related to the Internet outside the information. When the business data deployed on the external information network is exchanged with the business data deployed on the internal information network, the security level of the business data is judged and filtered; according to the service The physical layer of the power failure emergency repair command platform is divided into the key protection core area, the safety area and the basic safety area, and between the key protection core area and the safety area, the safety area and the basic safety area, respectively. Deploy network isolation devices between security zones, formulate access control policies for each zone based on user roles and the flow of business data between zones; obtain business data in key protection core zones, security zones, and basic security zones, and restrict them according to business data Check the integrity of the conditions to obtain the available business data, obtain the system operation log, user operation log, application database log and operating system log from the available business data, and analyze the system operation log, user operation log, application database log and Perform security audits on operating system logs and generate audit reports. When an error or warning event occurs, locate the person responsible for the error or warning event according to the audit report; protect the core area, security area, and basic security area based on user roles, geographic locations, and key areas Based on user roles, access rights are assigned, and user account information, user login time, logout time, access terminal address, operation objects and operation methods are recorded, user operation logs are generated, and users are adjusted according to user operation logs. access rights. By physically isolating the power failure emergency repair command platform, business data involving the Internet is deployed on the information extranet, and business data involving the platform is deployed on the information intranet, ensuring the security of business data. By dividing the physical layer of the power failure emergency repair command platform into key protection core areas, security areas and basic security areas, and formulating access control policies for each area according to user roles and the flow of business data between areas, the service of the platform is satisfied. Guarantee requirements, information security requirements and production security requirements, and provide different access control strategies for users with different roles to ensure the security of business data. Through the audit report, the cause of the problem and the person responsible for the error or warning event can be accurately located, and the existing problems of the platform can be revised and improved in time to ensure the safe operation of the power failure emergency repair command platform. Adjust user access permissions through user operation logs, provide appropriate permissions for users with different roles, and avoid sensitive data leakage.

Description of drawings

In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the accompanying drawings required in the description of the specific embodiments or the prior art. Obviously, the accompanying drawings in the following description The drawings are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without creative efforts.

1 is a flowchart of a specific example of a safety management and control method for a power failure emergency repair system in an embodiment of the present invention;

2 is a flowchart of another specific example of a safety management and control method for a power failure emergency repair system in an embodiment of the present invention;

3 is a flowchart of another specific example of the safety management and control method of the power failure emergency repair system in the embodiment of the present invention;

FIG. 4 is a flowchart of another specific example of the safety management and control method of the power failure emergency repair system in the embodiment of the present invention;

FIG. 5 is a schematic block diagram of a specific example of a safety management and control system of a power failure emergency repair system in an embodiment of the present invention;

FIG. 6 is a composition diagram of a specific example of a computer device provided by an embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In the description of the present invention, it should be noted that the terms "installed", "connected" and "connected" should be understood in a broad sense, unless otherwise expressly specified and limited, for example, it may be a fixed connection or a detachable connection connection, or integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal connection of two components, which can be a wireless connection or a wired connection connect. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood in specific situations.

In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

An embodiment of the present invention provides a safety management and control method for a power failure emergency repair system, as shown in FIG. 1 , including the following steps:

Step S1: Physically isolate the power failure emergency repair command platform according to the application environment, security risk assessment results and business data flow of the power failure emergency repair command platform, deploy the business data involving the Internet on the information extranet, and deploy the business data involved in the platform In the information intranet, when the service data deployed in the information extranet is exchanged with the service data deployed in the information intranet, the security level of the service data is judged and filtered.

In a specific embodiment, the application environment of the power failure emergency repair command platform is very complex, involving a large number of software and hardware platform equipment and various internal and external network channels, and has close internal and external connections. greater security risk. Therefore, the power failure emergency repair command platform follows the principle of information internal and external network isolation, and is guided by the results of security risk assessment and business data flow. The business data involved in the platform is deployed on the information intranet to ensure the safe operation of the power failure emergency repair command platform. At the same time, when the business data of the internal and external networks is exchanged, the security level of the business data is judged and filtered, which further ensures the business data security of the power failure emergency repair command platform. Among them, the safety risk assessment results are based on the technical and management assessment results of the power failure emergency repair command platform.

In a specific embodiment, as shown in FIG. 2 , when the service data deployed on the external information network is exchanged with the service data deployed on the internal information network, the security level judgment and filtering are performed on the service data, including the following steps:

Step S11 : judging the security level of the service data, when the service data is sensitive data, data exchange between the service data deployed on the information extranet and the service data deployed on the information intranet is prohibited.

Step S12: When the business data is insensitive data, perform data exchange after desensitizing the business data.

In this embodiment of the present invention, sensitive data can be further classified into core sensitive data and basic sensitive data. By judging and filtering the security level of business data, the leakage of sensitive data is avoided.

Step S2: Divide the physical layer of the power failure emergency repair command platform into key protection core areas, safety areas and basic safety areas according to service assurance requirements, information security requirements and production safety requirements, and separate the areas between the key protection core area and the safety area. , Deploy network isolation devices between security zones and basic security zones, and formulate access control policies for each zone according to user roles and business data flow between zones. User roles include: general users, business application administrators, system administrators, and Lead users, among them, lead users with the highest authority level, system administrators next, business application administrators again, and general users last.

In a specific embodiment, the command platform for emergency repair of power failures is used as a carrier platform for emergency repair services for power failures in power grid business, and puts forward high requirements for the service guarantee requirements, information security requirements and production safety requirements of the platform. The physical layer of the emergency repair command platform is divided into key protection core areas, safety areas and basic safety areas. Among them, the security level of the key protection core area is higher than the security area, the security level of the security area is higher than the basic security area, the key protection core area is used to store core sensitive data, the security area is used to store basic sensitive data, and the basic security area is used to store core sensitive data. Store basic data (ie, non-sensitive data). In order to ensure the security of business data in each area, the power failure emergency repair command platform deploys network isolation equipment between the key protection core area and the security area, and between the security area and the basic security area, and formulates access control strategies for each area.

In an embodiment of the present invention, as shown in Figure 3, formulating an access control policy for each zone according to the user role and the business data flow between the zones includes the following steps:

Step S21: When the business data flows from the basic security zone to the security zone or from the security zone to the key protection core zone, the system administrator and leading users are allowed to access the business data.

Step S22: When the service data flows from the security zone to the basic security zone or from the key protection core zone to the security zone, all user roles are allowed to access the service data.

Step S3: Obtain the business data in the key protection core area, the security area and the basic security area, perform integrity verification according to the business data constraints, obtain available business data, and obtain system operation logs and user operations from the available business data. logs, application database logs and operating system logs, and conduct security audits on system operation logs, user operation logs, application database logs and operating system logs, and generate audit reports. Warning the person responsible for the incident.

In a specific embodiment, in order to ensure the integrity of the business data of the power failure emergency repair command platform, integrity verification needs to be performed according to the constraints, and the specific constraints include: non-empty constraints, lack of constraints, verification constraints, primary key constraints, Unique constraints and foreign key constraints. In order to better solve problems when problems occur, and to avoid possible loopholes and risks in a timely manner, in the embodiment of the present invention, the system operation log, user operation log, application database log and operating system log are secured. Audit, generate audit reports, when an error or warning event occurs, according to the audit report can accurately locate the cause of the problem and locate the responsible person for the error or warning event, report the cause of the problem and notify the corresponding responsible person, so as to facilitate timely The existing problems of the platform are revised and improved to ensure the safe operation of the power failure emergency repair command platform.

Step S4: According to the user role, geographical location and the security level of the key protection core area, security area and basic security area, access rights are allocated based on the user role, and the user account information, user login time, logout time, access time are recorded. Terminal address, operation object and operation method, generate user operation log, and adjust user's access authority according to user operation log.

In a specific embodiment, for different regions, the power failure emergency repair command platform of the power supply unit to which the power supply unit belongs limits the geographic location of the user. For example, when a user in area A logs in to the power failure emergency repair command platform, he can only access area A. According to the user's role permission level, the security level of the key protection core area, the security area and the basic security area, you can access the business data of different levels in area A to ensure the security of the background applications of the corresponding power supply unit. When the access permission setting is inappropriate, the user's access permission can be adjusted at any time according to the user operation log.

In the embodiment of the present invention, as shown in FIG. 4 , adjusting the user's access authority according to the user operation log includes the following steps:

Step S41: Compare the user account information with the locally stored user account information, and when the comparison results are inconsistent, determine that the user account is the first login.

Specifically, when different users log in to the power failure emergency repair command platform, there will be a distinction between initial login and re-login (that is, not the first login). Appropriate or not, only the actual operation can evaluate whether the permission configuration is appropriate. The user who logs in again has been configured with appropriate permissions based on the previous operation log. Therefore, in order to configure appropriate permissions for the user, it is necessary to determine whether the user account is the first login.

Step S42: when the user account is the first login, the user's access authority is obtained according to the user account information. The access authority includes: object-level authority and behavior-level authority, the object-level authority is used to modify the behavior-level authority, and the behavior-level authority Permissions are used to obtain behavior data corresponding to the behavior level from the power failure emergency repair command platform.

Specifically, when the user account is logged in for the first time, different user roles have different access rights. When the user role is a lead user, the user has object-level permissions and behavior-level permissions. The lead user can modify the permissions according to the object-level permissions. Behavior-level permissions for system administrators, business application administrators, and general users; when the user role is system administrator, the user has object-level permissions and behavior-level permissions, and system administrators modify business applications based on object-level permissions Behavior-level permissions of administrators and general users; when the user role is a business application administrator, the user has object-level permissions and behavior-level permissions, and business application administrators can modify the behavior-level permissions of general users according to the object-level permissions. Permissions; when the user role is a general user, the user has only behavior-level permissions. Each user with different roles has the authority of the behavior level, which is used to obtain the behavior data of the corresponding behavior level from the power failure repair command platform.

Step S43: When the user account is the first login, first determine whether the user has the object-level permission, when the user has the object-level permission, execute the permission, and return the modified behavior-level permission to the user, when the user has no object-level permission. When the object-level permission is used, it is judged whether the user has the behavior-level permission. When the user has the behavior-level permission, the permission is executed, and the corresponding behavior data obtained by the behavior-level permission is returned to the user.

Specifically, when the lead user logs in for the first time, it is first determined that the user has the object-level permission, then executes the permission, modifies the behavior-level permissions of other roles, and returns the modified behavior-level permissions to the leader user and For the modified user, after the object-level permission is executed, the behavior-level permission of the leader user starts to be executed, and the behavior data corresponding to the behavior-level permission is obtained. When the user role is the system administrator or the business application administrator, the permission execution process is the same as that of the lead user, and details are not repeated here. When a general user logs in for the first time, it is first determined that the user does not have object-level permissions, and then it is determined that the user has behavior-level permissions, and the user's behavior-level permissions are executed to obtain behavior data corresponding to the behavior-level permissions. .

Step S44: When the user account is logged in for the first time, evaluate the behavior status of the user when the user executes the authority according to the user operation log, and adjust the user's access authority when it is determined that the user's behavior status when the user executes the authority is abnormal.

Specifically, according to the user operation log (ie, the authorization execution process), it is judged whether the authorization of the first login user is appropriate. For example, when the user role is a business application administrator, if the user's authority can obtain business data that can only be obtained by the system administrator role, it means that the authority configuration of the business application administrator is not appropriate at this time, and the business application needs to be The administrator's permissions are adjusted to those of the business application administrator role.

Step S45: Compare the user account information with the locally stored user account information, and when the comparison results are consistent, determine that the user account is not the first login, and access the power failure emergency repair command platform according to the established access policy.

Specifically, when the user does not log in for the first time, the user has already configured appropriate permissions according to the previous operation log, and there is no need to re-evaluate the behavior status of the user when the user executes the permissions. It is enough to access the power failure emergency repair command platform according to the established access policy, reducing the need for Power failure emergency repair command platform workload.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

It adopts dual-device and dual-link mode to connect and communicate with the power failure emergency repair command platform. When any one of the lines fails, it will be shielded from the service list and switched to the normal line and the communication equipment supporting the normal line. After detecting the fault recovery, switch back to the original line and the original communication equipment matched with the original line, and record the fault information in the system operation log.

In a specific embodiment, in order to ensure the safe operation of the power failure emergency repair command platform, a redundant design is generally adopted, for example, a dual device and dual link mode is used to connect and communicate with the power failure emergency repair command platform to prevent the communication from being terminated when one line fails. , and then the power failure repair command platform cannot run.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

The platform running time and downtime are obtained according to the system operation log, and the platform availability is obtained according to the platform running time and downtime. When the platform availability is less than the preset threshold, a prompt message for background software and hardware architecture upgrade is generated.

In a specific embodiment, the preset threshold is 99.9%. When the system availability is less than 99.9%, it means that the platform's ability to provide continuous services cannot meet the needs of emergency repair command for power failures, and software and hardware architecture needs to be upgraded in the background.

In one embodiment, the safety management and control method of the power failure emergency repair system further includes:

Obtain business data in the key protected core area, security area, and basic security area, encrypt and store sensitive data in business data using public key infrastructure as the key, and use data backup, mirroring technology, and mirror server measures to encrypt and store business data. Backup processing.

In a specific embodiment, the sensitive data in the business data must be encrypted and stored to ensure the data security of the sensitive data. In the embodiment of the present invention, a public key infrastructure is used as a key for encryption/decryption. At the same time, data backup, mirroring technology and mirror server measures are used to back up business data, which improves the manageability, high security, integrity and easy recovery of business data.

The safety management and control method of the power failure emergency repair system provided by the present invention physically isolates the power failure emergency repair command platform according to the application environment of the power failure emergency repair command platform, the safety risk assessment result and the flow of business data, and deploys the business data related to the Internet outside the information. When the business data deployed on the external information network is exchanged with the business data deployed on the internal information network, the security level of the business data is judged and filtered; according to the service The physical layer of the power failure emergency repair command platform is divided into the key protection core area, the safety area and the basic safety area, and between the key protection core area and the safety area, the safety area and the basic safety area, respectively. Deploy network isolation devices between security zones, formulate access control policies for each zone based on user roles and the flow of business data between zones; obtain business data in key protection core zones, security zones, and basic security zones, and restrict them according to business data Check the integrity of the conditions to obtain the available business data, obtain the system operation log, user operation log, application database log and operating system log from the available business data, and analyze the system operation log, user operation log, application database log and Perform security audits on operating system logs and generate audit reports. When an error or warning event occurs, locate the person responsible for the error or warning event according to the audit report; protect the core area, security area, and basic security area based on user roles, geographic locations, and key areas Based on user roles, access rights are assigned, and user account information, user login time, logout time, access terminal address, operation objects and operation methods are recorded, user operation logs are generated, and users are adjusted according to user operation logs. access rights. By physically isolating the power failure emergency repair command platform, business data involving the Internet is deployed on the information extranet, and business data involving the platform is deployed on the information intranet, ensuring the security of business data. By dividing the physical layer of the power failure emergency repair command platform into key protection core areas, security areas and basic security areas, and formulating access control policies for each area according to user roles and the flow of business data between areas, the service of the platform is satisfied. Guarantee requirements, information security requirements and production security requirements, and provide different access control strategies for users with different roles to ensure the security of business data. Through the audit report, the cause of the problem and the person responsible for the error or warning event can be accurately located, and the existing problems of the platform can be revised and improved in time to ensure the safe operation of the power failure emergency repair command platform. Adjust user access permissions through user operation logs, provide appropriate permissions for users with different roles, and avoid sensitive data leakage.

An embodiment of the present invention also provides a safety management and control system for a power failure emergency repair system, as shown in FIG. 5 , including:

Physical isolation module 1 is used to physically isolate the power failure emergency repair command platform according to the application environment of the power failure emergency repair command platform, the results of security risk assessment and the flow of business data, and deploy the business data involving the Internet on the information extranet, and will involve the internal platform. The business data deployed in the information network is deployed in the information intranet. When the business data deployed in the information extranet is exchanged with the business data deployed in the information intranet, the security level of the business data is judged and filtered. For details, refer to the relevant description of step S1 in the above method embodiment, which will not be repeated here.

The area division module 2 is used to divide the physical layer of the power failure emergency repair command platform into key protection core areas, safety areas and basic safety areas according to service assurance requirements, information security requirements and production safety requirements, and the key protection core areas and Deploy network isolation devices between security zones and between security zones and basic security zones, and formulate access control policies for each zone according to user roles and the flow of business data between zones. User roles include: general users, business application administrators, System administrators and lead users. For details, refer to the relevant description of step S2 in the above method embodiment, which is not repeated here.

The security audit module 3 is used to obtain the business data in the key protection core area, the security area and the basic security area, perform integrity verification according to the constraints of the business data, obtain the available business data, and obtain the system operation from the available business data. Logs, user operation logs, application database logs and operating system logs, and conduct security audits on system operation logs, user operation logs, application database logs and operating system logs, and generate audit reports. Locate the person responsible for the error or warning event. For details, please refer to the relevant description of step S3 in the above method embodiment, which will not be repeated here.

Permission assignment module 4 is used to assign access permissions based on user roles, and record user account information, user login time, Logout time, access terminal address, operation object and operation method, generate user operation log, and adjust user's access authority according to user operation log. For details, refer to the relevant description of step S4 in the above method embodiment, which is not repeated here.

The safety management and control system of the power failure emergency repair system provided by the present invention physically isolates the power failure emergency repair command platform according to the application environment, safety risk assessment results and business data flow of the power failure emergency repair command platform by applying the safety management and control method of the power failure emergency repair system. , deploy the business data related to the Internet on the information extranet, and deploy the business data related to the platform inside the information intranet. The business data is judged and filtered on the security level; according to the service assurance requirements, information security requirements and production security requirements, the physical layer of the power failure emergency repair command platform is divided into key protection core areas, safety areas and basic safety areas. Deploy network isolation devices between zones and security zones, and between security zones and basic security zones, formulate access control policies for each zone based on user roles and business data flow between zones; obtain key protection core zones, security zones and basic security zones. The business data in the security zone is checked for integrity according to the business data constraints to obtain the available business data, and the system operation log, user operation log, application database log and operating system log are obtained from the available business data, and the system Perform security audits on operation logs, user operation logs, application database logs, and operating system logs, and generate audit reports. When an error or warning event occurs, locate the person responsible for the error or warning event according to the audit report; The security level of the key protection core area, security area and basic security area is assigned based on the user role, and the user account information, user login time, logout time, access terminal address, operation object and operation method are recorded. User operation log, and adjust the user's access rights according to the user operation log. By physically isolating the power failure emergency repair command platform, business data involving the Internet is deployed on the information extranet, and business data involving the platform is deployed on the information intranet, ensuring the security of business data. By dividing the physical layer of the power failure emergency repair command platform into key protection core areas, security areas and basic security areas, and formulating access control policies for each area according to user roles and the flow of business data between areas, the service of the platform is satisfied. Guarantee requirements, information security requirements and production security requirements, and provide different access control strategies for users with different roles to ensure the security of business data. Through the audit report, the cause of the problem and the person responsible for the error or warning event can be accurately located, and the existing problems of the platform can be revised and improved in time to ensure the safe operation of the power failure emergency repair command platform. Adjust user access permissions through user operation logs, provide appropriate permissions for users with different roles, and avoid sensitive data leakage.

An embodiment of the present invention provides a computer device. As shown in FIG. 6 , the device may include a processor 61 and a memory 62, where the processor 61 and the memory 62 may be connected through a bus or in other ways. FIG. 6 takes the connection through a bus as an example .

The processor 61 may be a central processing unit (Central Processing Unit, CPU). The processor 61 may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or Other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components and other chips, or a combination of the above types of chips.

As a non-transitory computer-readable storage medium, the memory 62 can be used to store non-transitory software programs, non-transitory computer-executable programs and modules, such as corresponding program instructions/modules in the embodiments of the present invention. The processor 61 executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory 62, that is, to realize the safety management and control method of the power failure emergency repair system in the above method embodiments. .

The memory 62 may include a storage program area and a storage data area, wherein the storage program area may store an operating system and an application program required by at least one function; the storage data area may store data created by the processor 61 and the like. Additionally, memory 62 may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid state storage device. In some embodiments, memory 62 may optionally include memory located remotely from processor 61, which may be connected to processor 61 via a network. Examples of such networks include, but are not limited to, the Internet, intranets, intranets, mobile communication networks, and combinations thereof.

One or more modules are stored in the memory 62, and when executed by the processor 61, execute the safety management and control method of the power failure emergency repair system in the embodiment shown in FIGS. 1-4.

The specific details of the above computer equipment can be understood by referring to the corresponding descriptions and effects in the embodiments shown in FIGS. 1-4 , and details are not repeated here.

Those skilled in the art can understand that the realization of all or part of the processes in the methods of the above embodiments is a program that can be completed by instructing relevant hardware through a computer program and can be stored in a computer-readable storage medium. When the program is executed , which may include the processes of the above-mentioned method embodiments. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a flash memory (Flash Memory), a hard disk (Hard Disk Drive) , abbreviation: HDD) or solid-state hard disk (Solid-State Drive, SSD), etc.; the storage medium may also include a combination of the above-mentioned types of memories.

Obviously, the above-mentioned embodiments are only examples for clear description, and are not intended to limit the implementation manner. For those of ordinary skill in the art, changes or modifications in other different forms can also be made on the basis of the above description. There is no need and cannot be exhaustive of all implementations here. And the obvious changes or changes derived from this are still within the protection scope of the present invention.

Claims (10)

1. A safety control method of a power failure emergency repair system is characterized by comprising the following steps:

the method comprises the steps that the power failure emergency repair command platform is physically isolated according to the application environment of the power failure emergency repair command platform, a safety risk evaluation result and the flow direction of service data, the service data related to the internet are deployed in an information extranet, the service data related to the inside of the platform are deployed in an information intranet, and when the service data deployed in the information extranet and the service data deployed in the information intranet are subjected to data exchange, safety grade judgment and filtering are carried out on the service data;

divide into key protection core district, safety zone and basic safety district with the physical layer of electrical fault rush-repair command platform according to service assurance demand, information security demand and production safety demand to dispose network isolation equipment between key protection core district and safety zone, safety zone and basic safety zone respectively, according to the business data flow direction between user role and each district and formulate the access control strategy in each district, the user role includes: general users, service application managers, system managers and leader users;

acquiring service data in a key protection core area, a safety area and a basic safety area, carrying out integrity verification according to service data constraint conditions to obtain available service data, acquiring a system operation log, a user operation log, an application database log and an operating system log from the available service data, carrying out safety audit on the system operation log, the user operation log, the application database log and the operating system log to generate an audit report, and positioning a responsible person causing an error or warning event according to the audit report when the error or warning event occurs;

according to the user role, the geographic position and the security level of the key protection core area, the security area and the basic security area, the access authority is distributed on the basis of the user role, user account information, user login time, user logout time, an access terminal address, an operation object and an operation mode are recorded, a user operation log is generated, and the access authority of the user is adjusted according to the user operation log.

2. The safety control method for the electrical fault emergency repair system according to claim 1, wherein the performing safety certification and filtering on the service data includes:

the safety level of the service data is judged, and when the service data are sensitive data, the data exchange between the service data deployed in the information extranet and the service data deployed in the information intranet is forbidden;

and when the service data are insensitive data, performing desensitization processing on the service data and then performing data exchange.

3. The method for safety management and control of a power failure emergency repair system according to claim 1, wherein the step of formulating an access control policy for each zone according to a user role and a traffic data flow direction between each zone comprises:

when the service data flows from the basic security zone to the security zone or from the security zone to the key protection core zone, allowing a system administrator and a leader user to access the service data;

when business data flows from a security zone to a basic security zone or from an important protection core zone to a security zone, all user roles are allowed to access the business data.

4. The method for safety control of an electrical fault emergency repair system according to claim 1, wherein the adjusting of the access right of the user according to the user operation log includes:

comparing the user account information with locally stored user account information, and judging that the user account is in initial login when the comparison result is inconsistent;

when the user account is in initial login, obtaining access authority of the user according to the user account information, wherein the access authority comprises: the power failure emergency repair command platform comprises an object level authority and a behavior level authority, wherein the object level authority is used for modifying the behavior level authority, and the behavior level authority is used for acquiring behavior data of a corresponding behavior level from the power failure emergency repair command platform;

when the user account is initially logged in, firstly judging whether the user has the authority at the object level, when the user has the authority at the object level, executing the authority, returning the modified authority at the behavior level to the user, when the user does not have the authority at the object level, judging whether the user has the authority at the behavior level, when the user has the authority at the behavior level, executing the authority, and returning corresponding behavior data acquired by the authority at the behavior level to the user;

when the user account is in initial login, the behavior state of the user when the user execution authority is evaluated according to the user operation log, and when the behavior state is abnormal when the user execution authority is judged, the access authority of the user is adjusted;

and comparing the user account information with locally stored user account information, judging that the user account is not the first login when the comparison result is consistent, and accessing the power failure first-aid repair command platform according to a set access strategy.

5. The method for safety control of a power fail-over system according to claim 1, further comprising:

the method comprises the steps of adopting a double-equipment and double-link mode to be connected and communicated with a power failure first-aid repair command platform, shielding any one line from a service list when the line has a failure, switching the line to a normal line and communicating with communication equipment matched with the normal line, switching the original line and the original communication equipment matched with the original line after the failure recovery is detected, and recording failure information to a system operation log.

6. The method for safety control of a power fail-over system according to claim 1, further comprising:

and acquiring the system operation time and the downtime according to the system operation log, acquiring the system availability according to the system operation time and the downtime, and generating prompt information for upgrading the background software and hardware architecture when the system availability is smaller than a preset threshold value.

7. The method for safety control of a power fail-over system according to claim 1, further comprising:

acquiring service data in a key protection core area, a security area and a basic security area, encrypting and storing sensitive data in the service data by using a public key infrastructure as a key, and performing backup processing on the service data by using data backup, a mirror image technology and a mirror image server.

8. The utility model provides a safety control system of electrical fault rush-repair system which characterized in that includes:

the physical isolation module is used for physically isolating the power failure emergency repair command platform according to the application environment of the power failure emergency repair command platform, a safety risk evaluation result and a service data flow direction, deploying service data related to the internet in an information extranet, deploying service data related to the inside of the platform in an information intranet, and judging and filtering the safety grade of the service data when the service data deployed in the information extranet and the service data deployed in the information intranet exchange data;

the regional division module is used for dividing the physical layer of the electric power fault rush-repair command platform into a key protection core area, a safety area and a basic safety area according to the service guarantee requirement, the information safety requirement and the production safety requirement, deploying network isolation equipment between the key protection core area and the safety area and between the safety area and the basic safety area respectively, and formulating the access control strategy of each area according to the user role and the service data flow direction between each area, the user role comprises: general users, service application managers, system managers and leader users;

the safety audit module is used for acquiring service data in a key protection core area, a safety area and a basic safety area, carrying out integrity verification according to service data constraint conditions to obtain available service data, acquiring a system operation log, a user operation log, an application database log and an operating system log from the available service data, carrying out safety audit on the system operation log, the user operation log, the application database log and the operating system log to generate an audit report, and positioning a responsible person causing an error or a warning event according to the audit report when the error or the warning event occurs;

and the authority distribution module is used for distributing the access authority on the basis of the user role according to the user role, the geographic position and the security level of the key protection core area, the security area and the basic security area, recording user account information, user login time, logout time, an access terminal address, an operation object and an operation mode, generating a user operation log, and adjusting the access authority of the user according to the user operation log.

9. A computer-readable storage medium storing computer instructions for causing a computer to execute the safety control method of a power failure emergency repair system according to any one of claims 1 to 7.

10. A computer device, comprising: a memory and a processor, the memory and the processor are connected with each other in communication, the memory stores computer instructions, and the processor executes the computer instructions to execute the safety control method of the power failure emergency repair system according to any one of claims 1 to 7.

Images