SM2加密体系在智能变电站远动通信中的应用  

Application of SM2 Encrypted System in Telecontrol Communication for Smart Substation

作　　者：骆钊[1] 严童 谢吉华[1,3] 朱俊澎 华伟 吴兴泉 

机构地区：[1]东南大学电气工程学院,江苏省南京市210096 [2]国网上海市南供电公司,上海市200233 [3]无锡市信息安全工程技术研究中心,江苏省无锡市214001 [4]江苏省电力公司检修分公司,江苏省南京市211102

出　　处：《电力系统自动化》2016年第19期127-133,共7页Automation of Electric Power Systems

基　　金：国家发改办高科技([2012]1424)国家信息安全专项"基于国产加密芯片的加密U盘及其软件系统";江苏省经信委综合([2011]1178)资助项目"加密存储介质及其软件系统的研发和应用";江苏省无锡市2012创新基金(科技支撑)项目(CGE01G1211)~~

摘　　要：针对智能变电站远动通信安全问题及现有的安全体系公钥算法大多采用RSA算法的现状,设计了基于IEC 62351-3的安全解决方案。分析了传输层安全(TLS)握手协议的整个流程,计算了相应的处理时间;分析如何利用缓存机制解决TLS协议作为安全传输通道连接时间过长的问题。最后,提出了基于SM2密码体系的TLS协议在智能变电站远动通信中"长连接"与"短连接"相互配合的安全策略机制,并以江苏省调度同步数字体系通信网为例,通过OPNET仿真得到通信数据总的传输延时。实验证明,该方案能有效满足智能变电站运动通信数据安全性和实时性需求。In view of the security problem of smart substation telecontrol communication and the mostly adopted RSA publickey algorithm in the existing security system,a security solution based on IEC-62351-3is designed.The whole procedure of transport layer secure（TLS）handshaking agreement and the corresponding processing time is calculated.Then,how to solve the problem of overlong connecting time when adopting TLS agreement as the transmission channel by utilizing cache mechanism is analyzed.Finally,a security strategy for smart substation telecontrol communication based on coordination betweenlong connectionandshort connectionof SM2 password based TLS agreement is proposed.The total transmission delay is simulated by the synchronous digital hierarchy（SDH）communication network of Jiangsu scheduling center on the OPENET platform,which indicates that the proposed scheme can well satisfy the security and real-time demand.

关 键 词：智能变电站 SM2 IEC 62351-3 传输层安全 OPNET仿真 

分 类 号：TM63[电气工程—电力系统及自动化] TM76TM73