基于国密算法的IPSec VPN技术在LKJ无线换装系统中的实现  

Realization of IPSec VPN Technology in LKJ Onboard Data Remote Reloading System Based on National Secret Algorithm

作　　者：何之煜 朱建设 李治岩 HE Zhiyu;ZHU Jianshe;LI Zhiyan(Communication&Signal Institute,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China)

机构地区：[1]中国铁道科学研究院集团有限公司通信信号研究所,北京100081

出　　处：《铁道标准设计》2021年第12期141-145,共5页Railway Standard Design

基　　金：中国铁道科学研究院集团有限公司科研重点项目(2019YJ065)。

摘　　要：由于新线修建、既有线改造和机车长交路跨局运行等多种因素影响,导致LKJ车载数据需要频繁换装,而目前以人工换装为主的LKJ车载数据换装方式,费时费力,因此,迫切需要研究LKJ车载数据无线换装系统来解决这一问题。LKJ车载数据无线换装系统中以公网传输的方式来实现车载与地面的双向通信,针对公网通信安全性的问题,基于国密加密算法,研究IPSec VPN技术在车地数据无线传输中建立安全加密隧道。通过分析通信双方IKE协商流程,基于IPSec VPN主模式建立车地安全传输通道,并在实验室搭建仿真测试环境。研究结果表明,车地通信以密文的方式传输,验证了车载无线换装模块与地面服务器之间安全传输通道的实现。Due to the influence of various factors such as new lines construction,existing lines upgrading and locomotive operation across different railway administrations,LKJ onboard data needs to be reloaded frequently.However,the major way of onboard data updating still depends on manual reloading,which is waste of time and resources.As a result,the LKJ onboard data remote reloading system should be studied urgently.In the LKJ onboard data remote reloading system,the communication between onboard device and ground device is fulfilled by public network,which has security problem.In this paper,based on the national cryptographic algorithm,the key technology of encrypted tunnel establishment is studied.The tunnel is set up for the radio communication between onboard data equipment and ground processing server using IPSec VPN method.Through analyzing the IKE negotiation flow between the communication pair,the safe communication channel is set up based on IPSec VPN main mode,and the simulating test environment is created in the lab.The results show that the vehicle-ground communication is transmitted in ciphertext and the realization of the safe transmission tunnel establishment between the onboard data remote reloading module and the ground server is verified.

关 键 词：LKJ车载数据 无线换装 IPSEC技术 国密算法 数据加密 安全传输通道 

分 类 号：U284.48[交通运输工程—交通信息工程及控制]