电力系统管理及相关信息交换 数据与通信安全 第7部分：网络与系统管理数据对象模型

[中文适用范围]： IEC 62351-7:2025 定义了专用于电力系统运行的网络与系统管理（NSM）数据对象模型。这些NSM数据对象将用于监控网络和系统的健康状况，检测可能的安全入侵，并管理信息基础设施的性能和可靠性。目标是定义一组抽象对象，以实现对智能电子设备（IED）、远程终端单元（RTU）、分布式能源资源（DER）系统及其他对电力系统运行至关重要的系统的远程健康状态监控。 随着电力系统运行对通信网络、智能电子设备及自定义通信协议等信息基础设施的依赖日益加深，信息基础设施的管理已成为确保电力系统运行安全与可靠性的关键。目前用于传输远程控制和自动化协议的通信基础设施已经采用基于IETF简单网络管理协议（SNMP）标准的健康和状态监控概念。然而，电力系统特定设备（如远程保护、远程控制、变电站自动化、同步相量、逆变器和保护装置）需要专门的健康状态监控方案。 NSM对象为用于电力系统的IEC协议（如IEC 61850和IEC 60870-5-104）提供监控数据，并包括设备特定的环境和安全状态信息。作为IEC 60870-5-104的衍生，IEEE 1815 DNP3也被纳入监控协议列表。 NSM数据对象使用专为IEC 61850开发的命名惯例，并扩展以应对NSM相关问题。为确保通用性，这些数据对象及其组成部分的数据类型被定义为数据对象的抽象模型。此外，为了在IEC 62351的这一部分中实现对电力系统设备监控的集成，NSM对象与管理信息库（MIB）的SNMP协议映射也已提供。那些已被现有MIB涵盖的对象在此标准中不再重复定义，而是预期符合现有MIB标准。例如，EST、SCEP、RADIUS、LDAP、GDOI等协议不属于本标准的适用范围。 本版IEC 62351-7取代并废止了2017年发布的IEC 62351-7版本。本次新版构成技术修订，包括以下显著技术变更：a) 重新审查并丰富了NSM对象数据模型；b) 采用UML模型对NSM对象进行描述；c) 包含了将SNMP协议MIB进行翻译的代码组件。 [外文原描述]： IEC 62351-7:2025 defines network and system management (NSM) data object models that are specific to power system operations. These NSM data objects will be used to monitor the health of networks and systems, to detect possible security intrusions, and to manage the performance and reliability of the information infrastructure. The goal is to define a set of abstract objects that will allow the remote monitoring of the health and condition of IEDs (Intelligent Electronic Devices), RTUs (Remote Terminal Units), DERs (Distributed Energy Resources) systems and other systems that are important to power system operations. Power systems operations are increasingly reliant on information infrastructures, including communication networks, IEDs, and self-defining communication protocols. Therefore, management of the information infrastructure has become crucial to providing the necessary high levels of security and reliability in power system operations. The telecommunication infrastructure that is in use for the transport of telecontrol and automation protocols is already subject to health and condition monitoring control, using the concepts developed in the IETF Simple Network Management Protocol (SNMP) standards for network management. However, power system specific devices (like teleprotection, telecontrol, substation automation, synchrophasors, inverters and protections) need instead a specific solution for monitoring their health. The NSM objects provide monitoring data for IEC protocols used for power systems (IEC 61850, IEC 60870-5-104) and device specific environmental and security status. As a derivative of IEC 60870-5-104, IEEE 1815 DNP3 is also included in the list of monitored protocols. The NSM data objects use the naming conventions developed for IEC 61850, expanded to address NSM issues. For the sake of generality these data objects, and the data types of which they are comprised, are defined as abstract models of data objects. In addition to the abstract model, in order to allow the integration of the monitoring of power system devices within the NSM environment in this part of IEC 62351, a mapping of objects to the SNMP protocol of Management Information Base (MIBs) is provided. The objects that are already covered by existing MIBs are not defined here but are expected to be compliant with existing MIB standards. For example protocols including EST, SCEP, RADIUS, LDAP, GDOI are not in scope. This edition of IEC 62351-7 cancels and replaces IEC 62351-7 published in 2017. This new edition constitutes a technical revision and includes the following significant technical changes with respect to IEC 62351-7: a) Reviewed and enriched the NSM object data model; b) UML model adopted for NSM objects description; c) SNMP protocol MIBs translation included as Code Components