基于多级身份验证和轻量级加密的电力物联网数据安全系统设计  

Design of power Internet of Things data security system based on multiple authentication and lightweight password

作　　者：任天宇 王小虎 郭广鑫 王磊[2] 叶志远 唐加文 REN Tianyu;WANG Xiaohu;GUO Guangxin;WANG Lei;YE Zhiyuan;TANG Jiawen(State Grid Beijing Electric Power Research Institute,Beijing 100075,China;State Grid Beijing Electric Power Company,Beijing 100031,China;Anhui Jiyuan Software Co.Ltd.,Hefei 230088,China;College of Telecommunications&Information Engineering,Nanjing University of Posts and Telecommunications,Nanjing 210003,China)

机构地区：[1]国网北京市电力公司电力科学研究院,北京100075 [2]国网北京市电力公司,北京100031 [3]安徽继远软件有限公司,安徽合肥230088 [4]南京邮电大学通信与信息工程学院,江苏南京210003

出　　处：《南京邮电大学学报（自然科学版）》2020年第6期12-19,共8页Journal of Nanjing University of Posts and Telecommunications：Natural Science Edition

基　　金：国网北京市电力公司科技项目(520223190048)资助项目。

摘　　要：电力物联网大数据的安全问题给电力物联网云架构带来了挑战,为了克服该问题,文中提出了一种基于多级身份验证和轻量级加密的电力物联网数据安全方案。电力物联网设备产生的数据通过随机森林网络分类为敏感数据和非敏感数据,并使用三种对硬件资源要求较低的轻量级对称加密算法对数据进行加密,敏感数据使用RC6和Fiestel加密算法进行加密,非敏感数据使用SM4算法进行加密。同时为了保护云存储的数据免受恶意用户的侵害,还提出了一种具有信任机构的多级身份验证方案。结果表明,在安全强度、加密时间和解密时间上,文中提出的方法取得了比FCS.CP-ABE和MCP-ABE方法更好的性能。The security problem of big data generated by power Internet of Things(IoT)equipment brings challenges to the cloud architecture of power IoT.To solve the security problem,a data security scheme is proposed based on multiple authentication and lightweight encryption.The data generated by power IoT equipment are classified into sensitive data and non-sensitive data by a random forest network.Three lightweight symmetric encryption algorithms are used to encrypt the data.The sensitive data are encrypted by RC6 and Fiestel encryption algorithms.Non-sensitive data are encrypted by SM4 algorithm.Meanwhile,to protect the data stored in cloud from malicious users,a multiple authentication scheme with a trusted authority is proposed.The results show that the proposed scheme achieves better performance than FCS,CPABE and MCP-ABE methods on security strength,encryption time and decryption time.

关 键 词：电力物联网 云计算 数据安全 多级身份验证 轻量级加密 大数据 随机森林 

分 类 号：TN918.91[电子电信—通信与信息系统]