基于HMAC算法的远程电力监控通信安全策略  

Cyber security strategies based on HMAC in electric power remote monitoring and control system

作　　者：黄梦婕[1] 胥布工[1] 

机构地区：[1]华南理工大学基于互联网和现场总线实时控制实验室,广东广州510641

出　　处：《电力系统保护与控制》2011年第19期79-82,88,共5页Power System Protection and Control

基　　金：NSFC-广东联合基金重点项目(U0735003)

摘　　要：针对我国远程电力监控通信系统的安全问题,提出了基于哈希认证码算法(HMAC)的安全方案。充分考虑了实时嵌入式电网终端设备的局限性,设计和实现了数据来源真实性和数据完整性验证、用户身份认证、基于角色的操作权限限制和基于用户ID的审计等重要的安全功能。通过实验验证了该方案的可行性和安全性,它可以抵御电网通信中存在的数据篡改、伪造攻击、重放攻击等外部威胁和非法用户操作、用户越权操作等内部威胁。In order to solve cyber security problems in electric power remote monitoring and control system, a scheme based on Hash message authentication code algorithm （HMAC） is introduced. Important functions such as message authentication, message integrity, message replay resistance, user authentication, role-based authorization limit and user-based audit log collecting are designed and realized in the scheme, which fully considers the limitation of embedded electric power terminal unit. Finally, experiments prove the feasibility and safety of the scheme. It can resist external threats like message modification, masquerade, message replay and internal threats like unauthorized access and exceeding authority.

关 键 词：远程电力监控系统 通信安全 哈希认证码算法 身份认证 权限管理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]