基于区块链的电力系统安全稳定控制终端身份认证  

Identity Authentication of Power System Safety and Stability Control Terminals Based on Blockchain

作　　者：陈汹 朱钰 封科 于同伟 CHEN Xiong;ZHU Yu;FENG Ke;YU Tongwei(State Grid Electric Power Research Institute,Nanjing Jiangsu 211000,China;Research Institute of State Grid Liaoning Electric Power Company,Shenyang Liaoning 110000,China)

机构地区：[1]国网电力科学研究院有限公司,江苏南京211000 [2]国网辽宁省电力有限公司电力科学研究院,辽宁沈阳110000

出　　处：《广西师范大学学报（自然科学版）》2020年第2期8-18,共11页Journal of Guangxi Normal University:Natural Science Edition

基　　金：国家电网公司总部科技项目(1900035)。

摘　　要：在电力终端广泛互联背景下,传统安全稳定控制架构逐渐向终端智能协同的分布式安全稳定控制系统转变,但目前智能电网的安全稳定控制终端之间身份认证机制尚不健全,建立安全稳定控制终端之间的交互认证与信任机制,尽可能避免电力系统遭受网络攻击已成为亟待解决的问题。本文首先分析了电力安全稳定控制系统现状和由于缺少针对性的身份认证机制而面临的安全威胁;在此基础上,选取联盟链和适合的共识机制,提出了符合安全稳定控制系统特性的分布式身份认证方案,采用Hash链和分布式存储方案实现轻量级认证;最后,对方案进行了效率和安全性分析。本文提出的身份认证机制符合电力系统对时效性的高要求并能抵御中间人攻击、DoS攻击等常见的几种网络攻击,保障电力系统的安全稳定运行。Under the background of extensive interconnection of power terminals, the traditional security and stability control architecture gradually shifts to distributed Special Protection System(SPS) with terminal intelligent collaboration. However, the identity authentication mechanism between the security and stability control terminals of the smart grid is not yet complete, thus it has become an irresistible trend to establish the mutual authentication and trust mechanism between the security and stability control terminals so as to avoid power system from cyber attacks as far as possible. This paper first analyzes the current status of SPS and the security risks SPS faced due to lack of targeted identity authentication mechanisms. On this basis, the alliance blockchain and the appropriate consensus mechanism are selected, and an identity authentication scheme based on blockchain technology that meets the characteristics of SPS is proposed. The distributed identity authentication scheme of blockchain technology uses hash chains and a distributed storage scheme to achieve lightweight authentication. Finally, the efficiency and security of the scheme are analyzed. The identity authentication mechanism proposed in this paper meets the high requirements of the power system and can defend against several common network attacks such as man-in-the-middle attacks and DoS attacks, thus ensuring the safe and stable operation of the power system.

关 键 词：区块链 电力系统 安全稳定控制终端 身份认证 分布式存储 

分 类 号：TM76[电气工程—电力系统及自动化]