工业控制系统VPN网关的双机热备功能设计
投稿时间:2018-12-10  修订日期:2018-12-10  点此下载全文
引用本文:
摘要点击次数: 420
全文下载次数: 0
作者单位邮编
林丹生* 广东电网有限责任公司电力科学研究院 510000
基金项目:中国南方电网有限责任公司基金(副部级):电力监控系统信息安全脆弱性及风险自评估技术研究与应用(基金号:GDKJXM20161899)
中文摘要:随着网络技术的快速发展,远程安全通讯的需求日益强烈,针对工业控制系统而言,安全可靠的远程通信是工业控制系统正常稳定运行的前提。VPN技术是实现远程安全通信的有效解决方案,其基于对称密码算法实现数据的高速加密,基于非对称密码算法实现通信实体的身份认证以及数字签名,有效实现了远程通信数据的机密性保护和完整性保护。随着业务系统可靠性需求的提升,VPN网关双机热备功能成为远程通信需要重点解决的问题,本文针对工业控制系统VPN网关的双机热备功能进行了设计,本文首先讨论了工业控制系统VPN网关的部署架构,其次详细设计了VPN网关的双机热备各软件功能模块,实际应用证明,VPN网关的双机热备设计可以有效提高网络链路的可靠性,有效保障企业业务系统的可用性。
中文关键词:工业控制系统  网关  双机热备  
 
The design of dual-machine hot-standby function for the VPN gateway in the industrial control system
Abstract:With the rapid development of network technology, the need for long-distance secure communication is increasingly demanded. For the industrial control system, the safe and reliable remote communication is the precondition of the industrial control system. As an effective solution to realize the remote secure communication, the VPN technology can realize the high-speed encryption of data based on the symmetric cryptographic algorithm, can realize the identity authentication and digital signature based on the asymmetric cryptographic algorithm, and finally realize the confidentiality protection and integrity protection of remote communication. With the improvement of the reliability requirement of the business system, the dual-machine hot standby function of VPN equipment has become a key problem to be solved in remote communication. Based on the design of the Dual-machine hot-standby function of the VPN gateway, this paper discussed the deployment architecture of the VPN gateway, designed the state detection module, the state maintenance module and the data synchronization module in detail for the hot-standby function. It is proved that the Dual-machine hot-standby design of the VPN gateway can not only improve the reliability of the network link, but also ensure the availability of the business system.
keywords:industrial control system  gateway  dual-machine hot standby  
查看全文   查看/发表评论   下载pdf阅读器