基于数字证书认证的电力安全拨号认证系统  

A Digital Certificate Authentication-based Electric Power Safe Dialing Authentication System

作　　者：秦超[1] 张涛[1] 林为民[1] 

机构地区：[1]国网电力科学研究院/南京南瑞集团公司,江苏省南京市210003

出　　处：《电力系统自动化》2009年第19期52-55,100,共5页Automation of Electric Power Systems

摘　　要：针对电力远程拨号系统的安全防护需求,对其相关安全隐患进行了分析,并设计和实现了基于数字证书认证的电力安全拨号认证系统,分析了其技术特点。该系统可对拨号客户端和拨号网关进行数字证书互验及客户端可信接入,对传输数据进行加密、签名,避免敏感信息泄漏及篡改,并可进行细粒度访问控制和用户行为审计,有效地解决了电力远程拨号系统相关安全隐患,对电力二次系统安全防护具有重要意义。In view of the demand for security and protection of the electric power remote dialing system,an in-depth analysis is made of the possible hidden dangers to the system.An electric power safe dialing authentication system based on digital certificate authentication is designed and implemented.The technical characteristics of the system are dealt with such as its capability of certificate verification of both the dialing client end and the dialing grid and client end creditable access,data encryption and signature to avoid sensitive information leakage and distortion, while performing fine grained access control and user behavior auditing, effectively solving possible security problems with the electric power remote dialing system.

关 键 词：挑战握手验证协议 公钥基础设施 证书权威认证机构 加密隧道 智能卡双因素认证 

分 类 号：TM769[电气工程—电力系统及自动化]