量子密钥在电网SSLVPN中的应用  

Application of Quantum Keys in SSL VPN of Power Grid

作　　者：刘东[1] 王双[1] 周静[2] 许曼莉 陈巍[1] 韩正甫[1] 

机构地区：[1]中国科学技术大学中国科学院量子信息重点实验室,安徽省合肥市230026 [2]中国电力科学研究院,北京市海淀区100192

出　　处：《电网技术》2014年第2期544-548,共5页Power System Technology

基　　金：国家电网公司科技项目(17201200028);中国博士后科学基金(2012M511419)

摘　　要：基于虚拟专用网(virtual private networks,VPN)技术的电力系统调度数据网使用对称加密技术来保护通信数据的安全性,加密密钥的分配和使用都存在不安全因素。为此,提出将量子密钥分配网络与电网相融合的方案,利用量子密钥分配技术解决密钥安全分配的问题,使通信双方之间能共享无条件安全的密钥。两网融合方案是通过使用量子服务器和VPN服务器来实现的,服务器能完成量子密钥从量子网络到电网应用的调度。通过对安全套接层(secure sockets layer,SSL)协议进行详细分析,从认证密钥、主密钥和会话密钥3个层次给出了量子密码的应用形式。在通信协议方面,为减少对现有协议的修改,通过附加的协商过程来协商量子密码的应用形式,实现密钥的获取和替换。该方法降低了整个融合方案的复杂性,提高了其可用性。Based on the technology of virtual private networks （VPN）, the symmetric cryptographic technique is utilized in the data network for power dispatching to ensure the security of communication data. However, there are potential insecurity factors in both distribution and usage of encryption keys. Thus a scheme to merge the quantum key distribution network with power grid dispatching data network is proposed to achieve secure key distribution by quantum key distribution （QKD） and make both sides of communication enable to share unconditional security keys. The merging of the two networks is implemented by using the quantum server and the VPN server, which can transmit the quantum key from the quantum network to power dispatching data network. Through the detailed analysis on secure sockets layer （SSL） protocol, the application forms of quantum key in three hierarchies, namely authentication key, master key and session key, is given. In the aspect of communication protocol, to decrease the modification of existing protocols the acquisition and replacement of keys are implemented by additional negotiation process to determine the application form of quantum keys. The proposed method reduces the complexity of the whole merging scheme and improves its usability.

关 键 词：量子密钥 安全套接层 虚拟专用网 电网 安全性 

分 类 号：TM734[电气工程—电力系统及自动化]