基于SM2密码体系的SD卡的电力移动终端安全接入方案  

Secure Access of Electric Power Mobile Terminal Using SM2-Crypto-system-Based SD Card

作　　者：王志贺[1] 骆钊[1] 谢吉华[1,2] 顾伟[1] 陈海超[3] 许超[1] 周亮 

机构地区：[1]东南大学电气工程学院,江苏南京210096 [2]无锡市信息安全工程技术研究中心,江苏无锡214001 [3]江西省电力设计院,江西南昌330096

出　　处：《中国电力》2015年第5期75-80,共6页Electric Power

基　　金：国家发改委高技术项目(发改办高科技[2012]1424号/2012国家信息安全专项-基于国产加密芯片的加密U盘及其软件系统);江苏省经信委综合资助项目(苏经信综合[2011]1178号/加密存储介质及其软件系统的研发和应用);无锡市2012创新基金(科技支撑)资助项目(CGE01G1211)~~

摘　　要：随着移动终端在智能电网中的广泛应用,如何确保移动终端更加安全地接入电力信息网亟待解决。针对现有加密SD卡的安全体系公钥算法大多采用RSA算法的现状,提出了电力移动终端采用国产SM2密码体系的SD卡安全接入方案,对SM2密码体系的SD卡、设计方案的网络和应用架构进行了详细分析。并以Android手机作为电力移动终端,对安全接入方案的代理功能和SD卡安全应用功能进行了测试分析,证明了该方案的可行性和安全性,该SD卡目前已在某省级电网试点应用,实际系统运行表明,方案有利于提高电力移动终端信息安全主动防御能力及实现电力信息安全产品国产化。With the wide application of mobile terminals into smart grid,it is urgent on the agenda to ensure the more secure access of mobile terminal to power information network.In view of the situation that the mostly used public key algorithms of encrypted SD card is RSA,a new secure access solution of electric power mobile terminal is proposed by using SM2-crypto-system-based SD card.An analysis is made on the SM2-crypto-system-based SD card,the network and application framework of the proposed solution.Meanwhile,the proxy function and the SD card secure application function are tested by using the Android mobile phone as the electrical power mobile terminal,which validates the feasibility and safety of the proposed solution.The SD card has been piloted in a provincial power grid,and the result proves that the proposed solution can be used as a reference for improving the active defense ability of mobile terminals and promoting the localization of electrical power information security products.

关 键 词：SM2 SD卡 电力移动终端 安全接入 透明代理 智能电网 信息安全 

分 类 号：TM76[电气工程—电力系统及自动化] TN918.4[电子电信—通信与信息系统]