基于自主可控操作系统平台的电力监控系统安全防护技术  

Security protection technology of power monitoring system based on autonomous and controllable operating system platform

作　　者：徐延明[1] 许艾 刘刚[1] 李维[1] 周立东[1] XU Yanming;XU Ai;LIU Gang;LI Wei;ZHOU Lidong(Beijing Sifang Automation Co.,Ltd.,Beijing 100085,China;Beijing Sifang Jibao Engineering Technology Co.,Ltd.,Beijing 100085,China)

机构地区：[1]北京四方继保自动化股份有限公司,北京100085 [2]北京四方继保工程技术有限公司,北京100085

出　　处：《浙江电力》2022年第7期94-100,共7页Zhejiang Electric Power

基　　金：国网浙江省电力有限公司科技项目(5211DS19002W)。

摘　　要：随着国内外安全形势的日趋严峻,电力系统安全越来越受到重视,电力监控系统是电力系统重要的系统之一。提出基于自主可控操作系统平台的电力监控系统关键程序安全防护机制,该安全机制通过研究分析操作系统ELF文件结构并设计出安全的ELF文件;通过签发操作系统平台证书与电力监控系统证书标识各自身份的真实性;采用国密算法与调度证书相结合的方式共同实现电力监控系统的本体安全。该技术保证了电力监控系统程序、模块及文件的完整性与可用性。实验证明,基于自主可控操作系统平台的电力监控系统关键程序安全防护机制在工程应用中有一定的参考意义。Given the increasingly severe security situation at home and abroad,the security of power system has received growing attention.Power monitoring system is one of the most important systems of power system.This paper proposes a security protection mechanism for the key programs of the power monitoring system based on the autonomous and controllable operating system platform.The security mechanism has designed a secure ELF file by studying and analyzing the ELF file structure of the operating system.Moreover,it issues certificates for the operating system platform and power monitoring system to identify their authenticity.Characterized by the combination of state secret algorithm and dispatching certificate,it is used for ontology security of power monitoring system.It assures the programs,modules,and files are intact and usable.The experimental results show that the key program security protection mechanism of the power monitoring system based on the autonomous and controllable operating system platform has a certain reference significance in engineering practice.

关 键 词：调度证书 自主可控 软件保护 代码签名 

分 类 号：TM73[电气工程—电力系统及自动化]