面向计量自动化系统的终端设备身份认证协议  

Terminal Equipment Identity Authentication Protocol for Measurement Automation System

作　　者：朱紫钊 刘静 

机构地区：[1]广东电网有限责任公司江门供电局,广东江门529200

出　　处：《通信技术》2017年第11期2566-2571,共6页Communications Technology

摘　　要：计量自动化系统涉及专公变、居民用电客户的计费数据、用电隐私、结算户信息等核心数据,对设备数据的产生、信息传输及存储等方面具有较高的保密性、完整性和真实性需求。利用数字签名和挑战应答思想,结合基于椭圆曲线密码理论的非对称公钥密码体制,设计了一个可应用于计量自动化系统与终端设备之间进行安全信息传输、身份认证的协议。该协议可有效抵抗伪造、满足前向安全性、公开验证性,实时高效地完成了消息认证和动态密钥协商,有效提高了系统与终端设备数据传输的有效性、真实性,从而提升了计量自动化系统整体的网络安全防护性能。The metering automation system involves the core data of special public substation, residential electricity customer＇s billing data, electricity privacy, settlement information and so on, and requires high confidentiality, integrity and authenticity for equipment data generation, information transmission and storage, etc. By using digital signature and challenge response, and combined with asymmetric public key cryptosystem based on elliptic curve cryptography theory, a protocol for secure information transmission and identity authentication of between metering automation system and terminal equipment is proposed and designed. The protocol can effectively resist forgery; satisfy the requirement of forward security and public verifiability, implement real-time message authentication and dynamic key negotiation, and effectively improve the validity and authenticity of data transmission of between the system and the terminal equipment, thus improving the overall network security performance of measurement automation system.

关 键 词：计量自动化系统 数据签名 安全性分析 椭圆曲线 

分 类 号：TM71[电气工程—电力系统及自动化]