CN101808143A - Method for access of IPv4 power terminal into IPv6 power data communication network - Google Patents

Abstract

The invention provides a method for access of an IPv4 power terminal into an IPv6 power data communication network based on address mapping and security constraints. The use of the method can safely simply realize the following four applications with low cost: 1) the realization of data exchange and communication between the IPv4 power terminal and an IPv6 power terminal; 2) the realization of the access of the IPv4 power terminal into the IPv6 network and the data exchange and the communication with the IPv6 power terminal, 3) the realization of the access of the IPv4 power terminal into the IPv6 network and the completion of the data exchange and the communication between the IPv4 power terminals, and 4) the realization of the data exchange and the communication between the IPv4 power terminal and the IPv4 power terminal.

Description

A kind of IPv4 electric power terminal inserts the method for IPv6 electric power data communication network

Technical field

The invention belongs to the electric power data communications field, a kind of method that inserts IPv6 electric power data communication network based on the IPv4 electric power terminal of map addresses and security constraint has been proposed, and Bindery security constraint, how the electric power terminal (for example electricity consumption acquisition terminal or the like) that solves band IPv4 address will insert electric power IPv6 data communication network in future.Method of the present invention is called for short MAS (MatchAddress with Security).

Background technology

The IP agreement is the core protocol of the Internet.Present widely used IPv4 agreement is in the design of phase at the end of the seventies in last century, and no matter from computer development itself or from internet scale and network transmission speed, IPv4 has been difficult to adapt to requirement.IPv4 address total amount is 2 32 powers promptly 4,294,967,296, the usefulness but 32 IPv4 address has been nowhere near, and the expert estimates that global ip v4 address resource will exhaust in 2012 years.

Adopting length is the IPv6 agreement of 128 IP addresses, can solve the difficult problem of IPv4 address shortage, and at aspects such as address capability, fail safe, network management, mobility and service quality tangible improvement be arranged.But IPv4 will be very long process to the IPv6 transition, need consider the existing investment of existing each network operation entity, and this comprises many aspects such as equipment investment, market investment, technological reserve, talents reserve.Have only networking technology and its corresponding scheme of protecting existing investment well, just can have better practicability.

Aspect operation useful life, all kinds of assets generation gap differences are huge in the power industry.For example, machinery/civil engineering class assets are 40 to 70 years, and the electric information assets are 20 to 30 years, and the communication device class assets are 8 to 10 years, and information equipment class assets are 4 to 5 years.The operation useful life aspect, electric power terminal will be higher than the electric power data communication network.Present electric power terminal all is based on the IPv4 agreement basically.So the IPv4 electric power terminal inserts the method for electric power IPv6 data communication network, has great demand in future.

At present, the method for IPv4 terminal accessing IP v6 data communication network comprises in the marginal router of terminal, dual stack of dual stack and the IPv6 data communication network and sets up the IPv4 tunnel.All there are cost height, technical sophistication, deficiency that the realization difficulty is big, and have address safety hidden danger.

Summary of the invention

The present invention proposes a kind of method that inserts IPv6 electric power data communication network based on the IPv4 electric power terminal of map addresses and security constraint.Referring to Fig. 1.

The definition address field is as follows.

A＝[a ₁?a ₂?...?a ₃₂]

A is an IPv4 address matrix vector in the formula, a ₁a ₂... a ₃₂For 32 bit address of IPv4 electric power terminal are arranged from high to low.

B＝[b ₁?b ₂?...?b ₁₂₈]

B is an IPv6 address matrix vector in the formula, b ₁b ₂... b ₁₂₈For 128 bit address of IPv6 electric power terminal are arranged from high to low.

Definition map addresses matrix is as follows.

Work as n=128, during m=32,

$H=\left(\begin{array}{cccc}{h}_{11}& h_{12}& ...& h_{1128}\\ h_{21}& h_{22}& ...& h_{2128}\\ ...& ...& ...& ...\\ h_{321}& h_{322}& ...& h_{32128}\end{array}\right)$

H is the map addresses matrix of IPv4 to IPv6, wherein h in the formula ₁₁To h _{32 128}Be the element of IPv4 in the map addresses matrix H of IPv6 of 32 row 128 row;

$H^{-1}=\left(\begin{array}{cccc}{g}_{11}& g_{12}& ...& g_{132}\\ g_{21}& g_{22}& ...& g_{232}\\ ...& ...& ...& ...\\ g_{1281}& g_{1282}& ...& g_{12832}\end{array}\right)$

H in the formula ^-1Being the inverse matrix of H, also is the map addresses matrix of IPv6 to IPv4, wherein g ₁₁To g _{128 32}Be the map addresses matrix H of the IPv6 of 128 row, 32 row to IPv4 ^-1Element in (being the inverse matrix of H).

Realize that the map addresses matrix relationship of electric power terminal from IPv4 to IPv6 is as follows,

B＝AH

Realize that the map addresses matrix relationship of electric power terminal from IPv6 to IPv4 is as follows,

A＝BH ^-1

The address safety constraint is made of jointly two security domains, the one, electric power system class of business security domain (comprising electrical production category information, information system management information, marketing category information, the interactive category information of intelligent grid user etc.), the 2nd, electric power system geographic area security domain (comprise 4 levels: zone, province, city, county).

X＝[x ₁，x ₂，x ₃，x ₄]

X is an electric power system class of business security domain matrix-vector

x ₁, x ₂, x ₃, x ₄Be respectively the security domain matrix-vector of electrical production category information, information system management information, marketing category information, the interactive category information of intelligent grid user etc.

Y＝[y ₁，y ₂，y ₃，y ₄]

Y is an electric power system geographic area security domain

y ₁, y ₂, y ₃, y ₄Be respectively region class, provincial, city-level, at county level etc. security domain matrix-vector.

[X, Y] is address safety constraint matrix vector.

$\tilde{A}=[X,Y]A$

Be IPv4 address matrix vector based on map addresses and security constraint (MAS),

$\tilde{B}=[X,Y]B$

Be IPv6 address matrix vector based on map addresses and security constraint (MAS),

The present invention sends out the logic block-diagram of receiving both direction and sees Fig. 2 and Fig. 3.

The advantage of technical solution of the present invention is: future; after the transition of electric power data communication network is IPv6; the existing electric power asset of protection; need not change existing IPv4 terminal; use the present invention; safety; easy and realize following four kinds of application at low cost; the one, realize between IPv4 electric power terminal and the IPv6 electric power terminal exchanges data with communicate by letter; the 2nd, realize the IPv4 electric power terminal insert between IPv6 network and the IPv6 electric power terminal exchanges data with communicate by letter; the 3rd, realize that the IPv4 electric power terminal inserts the IPv6 network and finishes between the IPv4 electric power terminal exchanges data and communicate by letter, the 4th, realize between IPv4 electric power terminal and the IPv4 electric power terminal exchanges data with communicate by letter.

Description of drawings

The present invention is further described below in conjunction with accompanying drawing.

Fig. 1 is the flow chart of the inventive method;

Fig. 2 is one of logic block-diagram of the present invention;

Fig. 3 is two of a logic block-diagram of the present invention;

Fig. 4 is specific embodiments of the invention one;

Fig. 5 is specific embodiments of the invention two;

Fig. 6 is specific embodiments of the invention three;

Fig. 7 is a block diagram of describing role of the present invention from application point.

Embodiment

A kind of method that inserts IPv6 electric power data communication network based on the IPv4 electric power terminal of map addresses and security constraint: four kinds of embodiments are arranged.

The one, realize between IPv4 electric power terminal and the IPv6 electric power terminal exchanges data with communicate by letter, method of the present invention is near the IPv4 electric power terminal, concrete enforcement as shown in Figure 4.The IPv4 electric power terminal sends the process of data by method of the present invention: S1.1 → S1.2 of Fig. 1 → S1.3 → S1.4 →, the IPv4 electric power terminal receives the process of data by method of the present invention: S2.1 → S2.3 of Fig. 2 → S2.4 →.

The 2nd, realize the IPv4 electric power terminal insert between IPv6 network and the IPv6 electric power terminal exchanges data with communicate by letter, the close IPv4 electric power terminal of method of the present invention is specifically implemented referring to Fig. 5.The IPv4 electric power terminal sends the process of data by method of the present invention: S1.1 → S1.2 of Fig. 1 → S1.3 → S1.4 →, the IPv4 electric power terminal receives the process of data by method of the present invention: S2.1 → S2.3 of Fig. 2 → S2.4 →.

The 3rd, realize that the IPv4 electric power terminal inserts the IPv6 network and finishes between the IPv4 electric power terminal exchanges data and communicate by letter, method of the present invention is specifically implemented referring to Fig. 6 near the IPv4 electric power terminal at two ends.Among Fig. 6, the IPv4 electric power terminal of left end sends the process of data by method of the present invention: S1.1 → S1.2 of Fig. 1 → S1.3 → S1.4 →, receive the process of data by method of the present invention: S2.1 → S2.3 of Fig. 2 → S2.4 →.The same left end of process that the IPv4 electric power terminal of right-hand member transmits and receive data.

The 4th, realize between IPv4 electric power terminal and the IPv4 electric power terminal exchanges data with communicate by letter, under this kind situation, method of the present invention has only been used security constraint, does not need to carry out map addresses, the close IPv4 electric power terminal of method of the present invention.One end IPv4 electric power terminal sends the process of data by method of the present invention: S1.1 → S1.2 of Fig. 1 → S1.5 →, receive the process of data by method of the present invention: S2.1 → S2.2 of Fig. 2 →.The process that other end IPv4 electric power terminal transmits and receive data is identical with it.

Comprehensive above-mentioned four kinds of embodiments, certain IPv4 electric power terminal, the process that sends data by method of the present invention can be expressed as logic block Fig. 2, and the process that receives data by method of the present invention can be expressed as logic block Fig. 3.

Be the block diagram of describing role of the present invention from application point as shown in Figure 7, be mainly reflected in following four aspects from application point role of the present invention.Data communication services between the following information of electric power system specifically comprises control informations such as intelligent grid generating, transmission of electricity, power transformation, distribution, scheduling, also comprises information such as intelligent grid user interactive information and information system management, marketing.

The one, realize that the IP electric power terminal of power plant, transmission line, transformer station, power distribution network, electric dispatching office etc. connects data communication network by method of the present invention, finish data communication each other.

The 2nd, realize that distribution scheduling institute, marketing institute, electricity consumption user's etc. IP electric power terminal connects data communication network by method of the present invention, finish data communication each other.

The 3rd, realize that the IP electric power terminal of administrative departments such as management, marketing, finance connects data communication network by method of the present invention, finish data communication each other.

The 4th, realize preceding 3 kinds of situation IP electric power terminals between any two, connect data communication network by method of the present invention, finish data communication each other.

The example that uses method of the present invention to calculate is as follows.The address of certain IPv4 electric power terminal is 192.168.0.10, when sending packet, is mapped as the packet that the IPv6 address is fe80::280:92ff:fe00:1122 by method of the present invention, with exchanges data between IPv6 electric power terminal or the IPv6 network with communicate by letter.When receiving packet, be 192.168.0.10 by method of the present invention with the IPv6 map addresses of fe80::280:92ff:fe00:1122, and then realize the correct packet that receives.

The soluble concrete technical problem of the present invention is exemplified below.

By the present invention, can realize between IPv4 electric power terminal and the IPv6 electric power terminal exchanges data and communicate by letter, referring to Fig. 4.

By the present invention, can realize that the IPv4 electric power terminal inserts the IPv6 network, with exchanges data between the IPv6 electric power terminal with communicate by letter, referring to Fig. 5.

By the present invention, can realize that the IPv4 electric power terminal inserts the IPv6 network, finish between the IPv4 electric power terminal exchanges data and communicate by letter, referring to Fig. 6.

Invention has been described according to specific exemplary embodiment herein.It will be conspicuous carrying out suitable replacement to one skilled in the art or revise under not departing from the scope of the present invention.Exemplary embodiment only is illustrative, rather than to the restriction of scope of the present invention, scope of the present invention is by appended claim definition.

Claims (1)

1. A method for IPv4 electric power terminal access IPv6 electric power data communication network, is characterized in that comprising sending and receiving two processes; (1) The process of sending a data packet by an IPv4 power terminal specifically includes the following steps: S1.1: The sending end IPv4 power terminal forms an address matrix vector A=[a ₁ a ₂ ... a ₃₂ ]; where A is the IPv4 address matrix vector, a ₁ a ₂ ... a ₃₂ is the 32-bit address of the IPv4 power terminal, The addresses are arranged from high to low; S1.2: Determine whether IPv4-to-IPv6 address conversion is required; in the case of communication between an IPv4 power terminal and an IPv6 power terminal, or in the case of communication between an IPv4 power terminal and an IPv6 network, if it is judged yes, enter Step S1.3; when the IPv4 power terminal directly communicates with the IPv4 power terminal, it is judged as no, then directly enter step S1.5; S1.3: Perform address mapping from IPv4 to IPv6, B=[b ₁ b ₂ ... b ₁₂₈ ], where B is the IPv6 address matrix vector, b ₁ b ₂ ... b ₁₂₈ is the 128-bit address of the IPv6 power terminal, so The above addresses are arranged from high to low; Define the address mapping matrix as follows:

When n=128, m=32, $\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; =</span>\left(\begin{array}{cccc}{\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 128</span>}}\\ {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 128</span>}}\\ <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>\\ {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 32</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 32</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; h</span>}}_{\mathrm{<span\; class="notranslate">\; 32</span>}\mathrm{<span\; class="notranslate">\; 128</span>}}\end{array}\right)$ In the formula, H is an address mapping matrix from IPv4 to IPv6, wherein h ₁₁ to h ₃₂₁₂₈ are elements in the address mapping matrix H from IPv4 to IPv6 of 32 rows and 128 columns; Realize the address mapping matrix relationship of the power terminal from IPv4 to IPv6 as follows: B=AH S1.4: Perform security constraints on the IPv6 address matrix vector B; Address security constraints are composed of two security domains. One is the power system business type security domain, including power production information, information management information, marketing information, and smart grid user interaction information. The second is the power system geographic area security Domain, including 4 levels: region, province, city and county; X=[x ₁ , x ₂ , x ₃ , x ₄ ] X is the matrix vector of the security domain of the power system business category; x ₁ , x ₂ , x ₃ , and x ₄ are the security domain matrix vectors including power production information, information management information, marketing information and smart grid user interaction information respectively; Y=[y ₁ , y ₂ , y ₃ , y ₄ ] Y is the security domain of the geographical area of the power system; y ₁ , y ₂ , y ₃ , and y ₄ are security domain matrix vectors including regional, provincial, city and county levels respectively; [X, Y] is the address security constraint matrix vector; $\stackrel{<span\; class="notranslate">\; ~</span>}{\mathrm{<span\; class="notranslate">\; B</span>}}<span\; class="notranslate">\; =</span><span\; class="notranslate">\; [</span>\mathrm{<span\; class="notranslate">\; x</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; Y</span>}<span\; class="notranslate">\; ]</span>\mathrm{<span\; class="notranslate">\; B</span>}$

is the IPv6 address matrix vector based on address mapping and security constraint MAS; S1.5: Perform security constraints on the IPv4 address matrix vector A, the method is the same as S1.4, the difference is that the address security constraint matrix vector [X, Y] corresponds to a 32-bit IPv4 address at this time, in

is an IPv4 address matrix vector based on address mapping and security constraint MAS; (2) The process that the IPv4 power terminal receives the data packet includes the following steps: S2.1: Receive the transmitted data packet, analyze its address to determine whether it is an IPv4 address, if it is determined to be an IPv4 address

Then enter step S2.2; if it is judged as no, the IPv6 address Then enter step S2.3; S2.2: Release IPv4 address

The security constraints of the IPv4 address matrix vector A are obtained, and the transmitted data packets can be received correctly; S2.3: Release IPv6 address

The security constraints of , get the IPv6 address matrix vector B; S2.4: Carry out the address mapping from IPv6 to IPv4, the address mapping matrix relation that realizes from IPv6 to IPv4 is as follows, A=BH ^-1 , then can correctly receive the data packet that transmits: ${\mathrm{<span\; class="notranslate">\; h</span>}}^{<span\; class="notranslate">\; -</span>\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; =</span>\left(\begin{array}{cccc}{\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; 32</span>}}\\ {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; 32</span>}}\\ <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>\\ {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 128</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 128</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}& <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>& {\mathrm{<span\; class="notranslate">\; g</span>}}_{\mathrm{<span\; class="notranslate">\; 128</span>}\mathrm{<span\; class="notranslate">\; 32</span>}}\end{array}\right)$ In the formula, H ^-1 is the inverse matrix of H, that is, the address mapping matrix from IPv6 to IPv4, wherein g ₁₁ to g _{128 32} are the address mapping matrix H ^-1 from IPv6 to IPv4 with 128 rows and 32 columns (that is, the inverse matrix of H ) elements in .

Images