一种适用于工业控制系统的加密传输方案  

An Encryption Transmission Scheme for Industrial Control System

作　　者：屠袁飞[1,2] 苏清健 杨庚[2] TU Yuanfei;SU Qingjian;YANG Geng(College of Computer Science and Technology,Nanjing University of Technology,Nanjing 211800,China;College of Computer Science and Technology,Nanjing University of Post and Telecommunication,Nanjing 210003,China)

机构地区：[1]南京工业大学计算机与科学技术学院,南京211800 [2]南京邮电大学计算机学院,南京210003

出　　处：《电子与信息学报》2020年第2期348-354,共7页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(61572263,61272084);江苏省高校自然科学研究重大项目(11KJA520002)~~

摘　　要：随着工业物联网(IoT)、云计算等信息技术与工业控制系统(ICS)的整合,工业数据的安全正面临着极大风险。为了能在这样一个复杂的分布式环境中保护数据的机密性和完整性,该文采用基于属性的加密(ABE)算法,设计一种集数据加密、访问控制、解密外包、数据验证为一体的通信方案,同时具有密文长度恒定的特点。最后,从正确性、安全性和性能开销3个方面对方案进行详细的分析,并通过仿真验证得出该算法具有低解密开销的优势。With the integration of information technology such as industrial Internet of Things(IoT), cloud computing and Industrial Control System(ICS), the security of industrial data is at enormous risk. In order to protect the confidentiality and integrity of data in such a complex distributed environment, a communication scheme is proposed based on Attribute-Based Encryption(ABE) algorithm, which integrates data encryption,access control, decryption outsourcing and data verification. In addition, it has the characteristics of constant ciphertext length. Finally, the scheme is analyzed in detail from three aspectsie correctness, security and performance overhead. The simulation results show that the algorithm has the advantage of low decryption overhead.

关 键 词：工业控制系统 机密性 解密外包 密文定长 数据验证 

分 类 号：TN918[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]