GB/Z 25320.7-2015Power systems management and associated information exchange - Data and communications security - Part 7: Network and system management (NSM) data object models (English PDF)

Foreword

GB /Z 25320 "power system management and information exchange data and communication security" mainly includes the following sections.

--- Part 1. Introduction to communication network and system security and safety issues;

--- Part 2. Terms;

--- Part 3. Communication network and system security including TCP/IP protocol set;

--- Part 4. Protocol set containing MMS;

--- Part 5. GB/T 18657, etc. and their derivatives standards of security;

--- Part 6. IEC 61850 safety;

--- Part 7. Network and Systems Management (NSM) data object model;

--- Part 8. Role-based access control. This section is Part 7 of GB /Z 25320. This section drafted according to GB/T 1.1-2009 given rules.

This section uses the translation method identical with IEC /T S62351-7.2010 "Power System Management and its information exchange data and communications security Full Part 7. Data Object Model for Network and System Management (NSM). " This guideline is for reference only. For advice or comments on this guidance document, be directed to the Director of Standardization Administration of the State Council Department reflected.

Introduction

Computer, communications and networking technologies are currently widely used in power systems. There are various kinds of information in communications and computer networks Possible security attacks pose a threat to the security of data and communications in power systems. These potential possible attacks target the power system Security vulnerabilities in communication protocols at various levels of the system and imperfections in the security management of power system information infrastructure.

To this end, we adopted the international standard to develop GB /Z 25320 "Power System Management and its information exchange data and communication security", pass Over the relevant communication protocols and in the information infrastructure management to add specific security measures to enhance and enhance the power system data and Communication security.

1 Scope

Power system operations are increasingly dependent on information infrastructures, including communications networks, intelligent electronic devices (IEDs, InteligentElec-tronicDevice), as well as custom communication protocols. Therefore, in order to provide the necessary high safety and reliability in the operation of power systems The management of the information infrastructure has become crucial. Using IETF for Network Management "Simple Network Management Protocol" (SNMP, SimpleNetworkManagementProtocol) standard proposed in the concept, this section defines the power system operation Unique Network and System Management (NSM) data object model. These NSM data Objects will be used to monitor the health of networks and systems, discover possible security intrusion, and the performance of information infrastructure Rely on the management.

The NSM data object uses the naming convention for IEC 61850 and extends to address NSM issues. These data objects and The data types it contains are defined as abstract models of data objects. The actual format of the data object's bits and bytes will depend on these pulls The mapping of NSM data objects to specific protocols such as IEC 61850, IEC 60870-5, IEC 60870-6, IEC 61968/61970 (CIM Public Information Model), web services, SNMP or any other suitable protocol. Those maps are standard in several separate documents The The standardization of those maps will be written separately.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB /Z 25320.2-2013 Power system management and its exchange of information data and communications security Part 2 Terms (IEC /TS 62351-2:2008, IDT)

3 Terms and definitions

The terms and definitions defined in GB /Z 25320.2-2013 apply to this document.

4 Abbreviations

The abbreviations defined in GB /Z 25320.2-2013 apply to this document.

5 Background of Network and System Management (NSM) Requirements (Informative)