水利自动化控制系统中现场总线安全技术研究  

Research on safety technology of field-bus in automation control system of water conservancy

作　　者：陈宁[1] 高祥涛[1] 王美玲[1] 傅晓[2] 朱月 赵峰 施麟[4] 曹晓宁[1] 张磊 王培 吴立星 CHEN Ning;GAO Xiangtao;WANG Meiling;FU Xiao;ZHU Yue;ZHAO Feng;SHI Lin;CAO Xiaoning;ZHANG Lei;WANG Pei;WU Lixing(Jiangsu Province Hydrology and Water Resources Investigation Bureau,Nanjing 210029,China;Hohai University,Nanjing 21009,China;Management Division of Qinhuai River Hydraulic Engineeing of Jiangsu Province,Nanjing 210000,China;Department of Finance of Jiangsu Province,Nanjing 210000,China)

机构地区：[1]江苏省水文水资源勘测局,江苏南京210029 [2]河海大学,江苏南京210098 [3]江苏省秦淮河水利工程管理处,江苏南京210000 [4]江苏省财政厅,江苏南京210000

出　　处：《水利信息化》2020年第5期46-49,共4页Water Resources Informatization

基　　金：江苏省水利科技项目(2018056)。

摘　　要：在水利自动化控制系统中,广泛使用Modbus协议作为现场总线网络的串行通信协议,由于其缺乏访问控制、密钥管理、终端安全等措施,给系统带来不可避免的安全风险。研究国产混合加密技术的硬件安全模块,对使用Modbus协议通信的现场总线网络进行改进和保护。在无需进行现地大规模网络基础设施改造的前提下,提出一种安全稳定、自主可控、经济便利的水利自动化控制系统现场总线安全技术方案。In the water conservancy automation control system,Modbus protocol is widely used as the serial communication protocol of field-bus network.Due to its lack of access control,key management,terminal security and other measures,it brings inevitable security risks to the system.This paper studies a hardware security module of domestic hybrid encryption technology to improve and protect the field-bus network using Modbus protocol communication.On the premise that there is no need to transform the local large-scale network infrastructure,it puts forward a safe and stable,self-controllable,economical and convenient field-bus security technical scheme of water conservancy automation control system.

关 键 词：水利自动化 现场总线 身份认证 报文加密 完整性校验 

分 类 号：TP336[自动化与计算机技术—计算机系统结构]