Valid

GB/T 45906.4-2025Substation secondary system — Part 4: Cyber security protection (English PDF)

变电站二次系统 第4部分:网络安全防护

Open the GB/T 45906.4-2025 preview as PDF

Preview — first pages of GB/T 45906.4-2025 (full document: 15 pages)

This is a limited preview

Buy now to download the full PDF (15 pages)

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

August 1, 2025

Implementation date

February 1, 2026

Scope

GB/T 45906.4-2025 is the English-translated version of 变电站二次系统 第4部分:网络安全防护.

GB/T 45906.4-2025 is the Chinese national standard covering protecting a substation's secondary system from attack — the protection principle, the defence taken layer by layer through the physical infrastructure, the network structure, the network perimeter, the host and its trusted-computing immunity, the operational security, then the collection, storage, analysis and alarming of security events, the incident disposal, and the verification and assessment, since a control network reachable from a dispatch centre cannot be held at its boundary alone. Part 4 of the series. First edition, under the China Electricity Council. In force from 1 February 2026. Issued on 1 August 2025, it has been in force since 1 February 2026.

Document preview — GB/T 45906.4-2025

National Standard of the People's Republic of China

ICS
29.240.10
Classification
F 20

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • PrefaceIII
  • IntroductionIV
  • 1 Scope1
  • 2 Normative references1
  • 3 Terms and Definitions1
  • 4 Abbreviations2
  • 5 General Provisions2
  • 5.1 Protection Principle2
  • 5.2 Protection system2
  • 6 Security Defense3
  • 6.1 Infrastructure Security3
  • 6.2 Network Structure Security3
  • 6.3 Network Perimeter Security3
  • 6.4 On-body safety4
  • 6.5 Operational Safety7
  • 6.6 Trusted Security Immunity7
  • 7 Safety Monitoring8
  • 7.1 Basic Requirements8
  • 7.2 Collection8
  • 7.3 Storage8
  • 7.4 Analysis8
  • 7.5 Alarm8
  • 8 Safe disposal9
  • 9 Security Assessment9
  • 9.1 Safety Verification9
  • 9.2 Safety Assessment9
  • Appendix A (Informative) Major Cybersecurity Threats Facing Substation Secondary Systems10
  • Reference11

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 4 of GB/T 45906 "Substation Secondary Systems". GB/T 45906 has been published in the following parts.

— Part 1: General requirements;

— Part 2: Data and models;

— Part 3: Communication message specifications;

— Part 4: Network security protection;

— Part 5: Protection, control and related equipment;

— Part 6: Station monitoring system;

— Part 7: Centralized monitoring system;

— Part 8: Electrical operation error prevention;

— Part 9: Construction specifications;

— Part 10.Testing and inspection.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document was proposed by the China Electricity Council.

This document was prepared by the National Grid Operation and Control Standardization Technical Committee (SAC/TC446), the National Electric Power System Management and Information Exchange The Standardization Technical Committee (SAC/TC82) will be transferred to this department for coordination.

This document was drafted by: State Electric Power Dispatching and Control Center, State Grid Shanghai Electric Power Company, Nanjing NARI Information and Communication Technology Co., Ltd., China Electric Power Research Institute Co., Ltd., State Grid Hubei Electric Power Co., Ltd., State Grid Beijing Electric Power Company, State Grid Jiangxi Electric Power Co., Ltd.

Company, State Grid Ningxia Electric Power Co., Ltd., State Grid Corporation of China Northwest Branch, State Grid Hebei Electric Power Co., Ltd., State Grid Jiangsu Electric Power Co., Ltd.

Co., Ltd., State Grid Henan Electric Power Company, State Grid Qinghai Electric Power Company, China Southern Power Grid Co., Ltd., Nanjing NARI Relay Protection Electric Co., Ltd., Beijing Kedong Electric Power Control System Co., Ltd., NARI Technology Co., Ltd., Beijing Sifang Relay Protection Engineering Technology Co., Ltd.

Company, Xuji Electric Co., Ltd., Guodian Nanjing Automation Co., Ltd., State Grid Economic and Technological Research Institute Co., Ltd., Beijing Tongchuang Safe and Trustworthy Technology Co., Ltd.

The main drafters of this document are: Zhou Jieying, Wang Zhihua, Zhang Xiao (State Electric Power Dispatching and Control Center), Li Mingjie, Zhou Zexin, Shu Zhihuai, Zhan Xiong, Zhu Jiang, Shao Lisong, Lü Pengfei, Liu Yu, Jin Long, Yang Weiyong, Tang Zhenyu, Liu Wei, Zhang Xiao (Hubei), Zhang Hongjie, Gao Xin, Han Meng, Li Weixun, Chen Mingliang, Yu Jing, Wang Dan, Li Yanhe, Lin Qing, Ning Zhiyan, Shen Yan, Jia Ling, Ma Bin, Wu Jinyu, Qiu Weijie, Zhang Long, Wang Xuning, Tang Chengjun, Shen Zhihao, Yu Yue, Li Zhongqing, Zhu Chaoyang, Li Jinsong, Meng Jiangwen, Lu Xi, Gao Minghui, Wang Peng, Chang Jiale, Sun Yu, and Liu Changqing.

Introduction

In order to meet the transformation and development needs of the substation secondary system, the top-level design of the overall architecture, functions, data and equipment of the substation secondary system is realized.

Design, promote the optimization and upgrading of new power system equipment manufacturing industry, improve the overall performance and reliability level of substation secondary system, formulate this system List standards.

GB/T 45906 "Substation Secondary System" comprehensively covers general requirements, equipment system functional requirements, project implementation and testing, etc.

The substation secondary system consists of 10 parts.

— Part 1: General requirements. The purpose is to standardize the overall requirements and reliability, functional integration, information interaction, Network security and other technical requirements.

— Part 2: Data and Model. The purpose is to standardize the substation secondary system data and model framework, clarify data classification, collection Processing requirements, modeling methods, and model configuration processes.

— Part 3: Communication message specification. The purpose is to standardize the communication protocol set of the substation secondary system, clarify the data objects and communication The implementation method of the service.

— Part 4: Network security protection. The purpose is to standardize the technical requirements for security protection of substation secondary systems.

— Part 5: Protection control and related equipment. The purpose is to standardize substation relay protection and safety automatic devices, automation equipment Technical requirements for power equipment, power metering and power quality equipment, collection and execution equipment, communication equipment and auxiliary monitoring equipment.

— Part 6: Station Monitoring System. The purpose is to standardize the technical requirements of the station monitoring system, including functions, performance, information exchange, etc.

— Part 7: Centralized monitoring system. The purpose is to standardize the system architecture, functions, performance, information exchange, and Mutual technical requirements.

— Part 8: Electrical operation error prevention. The purpose is to standardize the overall requirements, architecture, functions and Energy, performance and application requirements.

— Part 9: Construction Specifications. The purpose is to standardize the overall requirements, design principles, process control and construction of substation secondary system engineering.

System and technical requirements.

— Part 10.Testing and inspection. The purpose is to standardize the general principles and requirements for the inspection of substation secondary system equipment and systems. Please wait. Substation secondary system Part 4: Network Security Protection

1 Scope

This document specifies the general principles, security defense, security monitoring and security assessment of substation secondary system network security protection.

This document applies to the design, development, procurement, deployment, maintenance, and evaluation of substation secondary system network security facilities.

2 Normative references

GB/T 22239

GB/T 36572-2018

3 Terms and Definitions

The following terms and definitions apply to this document.

3.1 cybersecurity

By taking necessary measures to prevent attacks, intrusions, interference, destruction and illegal use of the network and accidents, the network is kept stable.

The ability to ensure reliable operation and the integrity, confidentiality and availability of network data.

Note. A network is a system composed of computers or other information terminals and related equipment that collects, stores, transmits, and processes information in accordance with certain rules and procedures.

Exchange and processing system.

[Source. GB/T 22239-2019, 3.1, modified]

3.2 Ontology securityselfsecurity

The security and controllability of each module of the substation secondary system, including the security of business system software, operating system and basic software, Safety of computers and substation secondary equipment, etc.

[Source. GB/T 36572-2018, 3.9, with modifications]

3.3 [Source. GB/T 36572-2018, 3.10, with modifications]

Based on trusted computing technology, the secondary system of the substation is immune to security, ensuring the security and reliability of the operating system and business system software, and preventing Invasion by known and unknown viruses, Trojans and malicious codes.

3.4 entity of root of trust

Used to support the establishment and transmission of the trust chain of the trusted computing platform, and can provide external services such as integrity measurement, secure storage, and cryptographic calculation Functional module.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Editions of GB/T 45906.4

EditionTitleRevisionStatus
GB/T 45906.4-2025Substation secondary system - Part 4: Cyber security protectioncurrent editionCurrent

This page sells the current edition, GB/T 45906.4-2025. Earlier editions are listed for reference only.

How to Buy GB/T 45906.4-2025

  1. 1Add to cart. Click the "Buy GB/T 45906.4-2025" button on this page. You can add more standards before checkout.
  2. 2Checkout. Enter your email and billing details. Payment is processed securely by Stripe (cards, Apple Pay, Google Pay supported).
  3. 3Instant delivery (0–9 sec). Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
  4. 4Invoice included. A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 45906.4-2025

$245.00

$210.00for partners