电网电压监测装置接入协议安全分析与改进  

Security analysis and improvement of access protocol for voltage monitoring device in power network

作　　者：林楠 陈祚松 左黎明 王露[2,3] LIN Nan;CHEN Zuo-song;ZUO Li-ming;WANG Lu(Electric Power Research Institute,State Grid Jiangxi Electric Power Limited Company,Nanchang 330096,China;School of Science,East China Jiaotong University,Nanchang 330013,China;Institute of Systems Engineering and Cryptograph,East China Jiaotong University,Nanchang 330013,China)

机构地区：[1]国网江西省电力有限公司电力科学研究院,江西南昌330096 [2]华东交通大学理学院,江西南昌330013 [3]华东交通大学系统工程与密码学研究所,江西南昌330013

出　　处：《计算机工程与设计》2019年第11期3085-3089,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(11361024);江西省教育厅科技基金项目(GJJ161417、GJJ170386);国网江西省电力有限公司科技基金项目(52182017001L)

摘　　要：为提高基于无线APN虚拟专网的电压监测装置信息安全接入规范中的密钥协商协议和数据加密传输协议的安全性,对其进行改进。在密钥协商请求报文和应答报文中添加时间戳,密钥协商确认报文添加时间戳与报文签名,数据加密报文添加时间戳和报文签名的方式提升了协议的安全性。对改进后的密钥协商协议与数据加密传输协议进行安全性分析,分析结果表明,改进后的协议可以抵抗消息重放攻击、消息篡改攻击,能够实现协议报文的来源可靠性和数据完整性保护。To improve the security of key agreement protocol and data encryption transmission protocol in the information security access specification of voltage monitoring device based on wireless access point name(APN)virtual private network,they were improved.The security of the protocol was improved by adding a timestamp to the request message and reply message and adding a timestamp and a message signature to key agreement confirmation message and data encryption message.At the same time,the security of the improved key agreement protocol and the data encryption transmission protocol was analyzed.The analysis results show that the improved protocol can resist the message replay attack and the message tampering attack.And it can protect the source reliability and data integrity of protocol packets.

关 键 词：安全协议 密钥协商 加密传输 协议改进 数据完整性保护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]