SECURITY FRAMEWORK FOR TRANSMITTING COMMUNICATION MESSAGES BETWEEN A SUBSTATION LAN AND PACKET-SWITCHED WAN

摘要

The invention relates to the field of a security framework for transmitting communication messages between a Substation LAN and packet-switched WAN, in particular, a network interface for transmitting protection data in a power network. The present invention provides a network interface for transmitting communication data including protection data of a power communication network, between a Substation Ethernet LAN and a packet-switched WAN usually in Layer 2. The network interface comprises: a firewall and a Layer 3 router being connected with each other and adapted to transmit the communication data excluding the protection data; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router, and adapted to transmit the protection data. According to a further aspect, the present invention also provides a method for transmitting such communication data.

主权项

1. network interface for transmitting communication data including protection data of a power communication network between a Substation LAN and a packet-switched WAN, comprising:
a firewall and a Layer 3 router being connected with each other, and adapted to transmit the communication data excluding the protection data via a first communication channel; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router and adapted to transmit the protection data via a second communication channel.