面向电网应用的量子保密通信系统VPN实测分析  

Test Analysis on Practical VPN of Quantum Secret Communication System for Power Grid Application

作　　者：高德荃 陈智雨[1,2] 王栋 李国春 张素香[1] 

机构地区：[1]国家电网公司信息通信分公司,北京100761 [2]国家电网公司电力信息通信系统运行技术实验室,北京100761

出　　处：《电力信息与通信技术》2017年第10期38-42,共5页Electric Power Information and Communication Technology

基　　金：北京市科技计划项目(Z171100001217002)

摘　　要：保障电网业务相关的核心、敏感数据安全传输是电力通信安全的关键,电力量子保密通信系统依托量子密钥分发机制,以量子虚拟专用网技术(Virtual Private Networks,VPN)作为电力量子保密通信系统的核心组成设备,其基于量子密钥进行数据加解密以改进传统VPN的密码安全性。文章针对基于偏振调制的商用级量子保密通信系统VPN进行实测研究,描述了量子密钥分发以及量子VPN设备的工作机制;设计了量子VPN的仿真测试结构,利用实际的量子密钥分发设备、量子VPN和网络测试仪搭建了实验环境;通过综合网络测试仪仿真电网应用业务信息,对量子VPN的吞吐量、时延、加密算法等核心性能特征进行测试和统计分析,并实现了量子VPN对业务数据安全传输的验证。测试结果可为量子VPN在电网生产控制和管理信息化业务中的推广应用提供参考。Secure transmission protection of core and sensitive business data is a vital task of electric power teleconlmunication security. Quantunl secret communication systems rely on quantum key distribution （QKD） mechanism. As the core equipment in quantum secret communication system, quantum VPN achieves data encryption and decryption with quantum key to improve the cipher security oF traditional VPN, which can effectively enhance network security of power communication. In this paper, the working mechanism of quantum key distribution and quantum VPN equipment is firstly described for the commercial quantum secret communication system based on polarization modulation. The simulation experiment structure oF quantum VPN is designed, and the experimental environment is established by using the practical QKD equipment, quantum VPN and network tester. The most important performance characteristics including throughput, delay and encryption algorithm of quantum VPN are tested and statistically analyzed, and the verification of secure network transmission with quantum key is implemented. The test results can provide some technical reference for extensive application of quantum VPN in power grid production and management informatization business service.

关 键 词：电力通信安全 量子保密通信 量子密钥分发 量子VPN 量子通信 

分 类 号：TN918[电子电信—通信与信息系统]