高级检索

    智慧矿山多承载网络拓扑架构与安全策略技术研究

    Research on multi-bearing network topology architecture and security strategy technology of intelligent mine

    • 摘要: 随着智慧矿山的快速发展,多承载、大带宽、低时延的网络架构已成为支撑矿山高质量运营与智能化转型的关键基础设施。对智慧矿山的多承载网络拓扑架构进行仿真研究,旨在优化智慧矿山网络的性能并提升其安全性。基于智慧矿山在运动控制、过程控制、视频监控、环境感知等方面的实际业务需求,研究了多网融合背景下有线网络强化的设备堆叠技术与LACP链路汇聚控制协议,以增强工业环网的冗余能力,降低单点故障对网络的影响;在无线网络方面,采用AC无线控制器旁挂模式,结合新一代WiFi6接入点构建AC+AP架构的无线广域接入网络,利用其广覆盖的特性整合无线传感器网络,实现对温度、瓦斯浓度等环境参数的监测,从而构建涵盖工业以太网、无线传感器网络、WiFi6无线网络等多层次融合的网络拓扑结构。借助仿真工具对网络在数据传输、实时性与可靠性等方面的性能进行了评估。针对智慧矿山网络面临的安全威胁,研究了GRE over IPsec数据加密通信、无线网络人员SSL VPN的远程接入、vlan逻辑隔离及防火墙等技术,提出了一套覆盖网络边界防护、数据加密传输与防御机制的多层次安全策略,并通过实验仿真验证了其有效性。研究结果表明:多承载网络架构能够满足智慧矿山对高带宽、低时延和高可靠性的网络需求;基于该架构实施的边界防护、加密传输、终端接入管控与逻辑隔离等安全策略,可有效抵御潜在网络攻击,为智慧矿山网络的规划建设与安全运行提供理论支撑。

       

      Abstract: With With the rapid development of smart mines, the network architecture with multi-load, large bandwidth and low latency has become the key infrastructure to support the high-quality operation and intelligent transformation of mines. This paper conducts simulation research on the multi-bearing network topology architecture of smart mines, aiming to optimize the performance of smart mine networks and improve their security. Firstly, based on the actual business requirements of smart mines in motion control, process control, video surveillance, environmental awareness and other aspects, the equipment stacking technology enhanced by wired network and LACP link aggregation control protocol under the background of multi-network integration are studied to enhance the redundancy of industrial ring network and reduce the impact of single point of failure on the network. In terms of wireless network, the AC wireless controller side-by-side mode is adopted, and the wireless wide-area access network of AC + AP architecture is constructed in combination with the new generation of wifi6 access points, and the wireless sensor network is integrated by using its wide coverage characteristics to realize the monitoring of environmental parameters (such as temperature, gas concentration), so as to construct a multi-level integrated network topology covering industrial Ethernet, wireless sensor network, wifi6 wireless network and so on. With the help of simulation tools, the performance of the network in data transmission, real-time and reliability is evaluated. Secondly, aiming at the security threats faced by the smart mine network, the technologies of GRE over IPsec data encryption communication, remote access of wireless network personnel SSL VPN, vlan logic isolation and firewall are studied. A multi-level security strategy covering network boundary protection, data encryption transmission and defense mechanism is proposed, and its effectiveness is verified by experimental simulation. The research results show that the multi-bearing network architecture proposed in this paper can meet the network requirements of smart mines for high bandwidth, low latency and high reliability. The security strategies implemented based on this architecture, including boundary protection, encrypted transmission, terminal access control and logical isolation, can effectively resist potential network attacks, provide theoretical support for the planning, construction and safe operation of smart mine networks, and have reference value for related engineering practices.

       

    /

    返回文章
    返回