基于SM9门限签名的电力终端安全认证方案  

Security authentication scheme for power terminals based on the SM9 threshold signature

作　　者：喇元[1] 赵继光 张伟 LA Yuan;ZHAO Jiguang;ZHANG Wei(China Southern Power Grid Co.,Ltd.,Guangzhou 510530,China;China Southern Power Grid Digital Grid Research Institute Co.,Ltd.,Guangzhou 510633,China)

机构地区：[1]中国南方电网有限责任公司,广东广州510623 [2]南方电网数字电网研究院有限公司,广东广州510633

出　　处：《电力科学与技术学报》2022年第4期183-188,226,共7页Journal of Electric Power Science And Technology

基　　金：国家重点研发计划(2018YFB0904905);中国南方电网有限责任公司科技项目(ZBKJXM20180347)。

摘　　要：考虑智能电网场景下海量电力终端的安全认证需求,针对密钥在电力终端安全便捷的存储、使用问题,提出基于SM9门限签名的电力终端安全认证方案。首先,将无证书标识密码技术应用于电力终端,以解决原有的PKI防护体系中证书管理复杂等缺陷;其次,结合门限密码学的思想,对标准的SM9数字签名算法进行改进,将SM9私钥进行分割、存储,并在电力终端使用私钥签名过程中,采用电力终端与服务端交互计算后合成签名的方法,再以此方法为基础构建电力终端的安全认证方案;最后,经详细理论推导和分析证明方案的正确性和安全性,并通过实验算例验证方案的有效性。Considering the security authentication requirements due to the massive power terminals in the smart grid scenario,the problem of safe and convenient storage and use of keys in power terminals is studied,and a power terminal security authentication scheme is proposed based on SM9 threshold signature.First of all,the certificateless identity-based cryptographic technology is applied to the power terminal and it can solve the defect that certificate management in the original PKI protection system is relatively complex.Then,the threshold cryptography is introduced to improve the standard SM9 digital signature algorithm.The SM9 private key is split and then stored separately.When using the private key signature,a synthesizing signature is generated via an interactive calculation between the power terminal and the server.Based on this algorithm,a power terminal security authentication scheme is proposed.Finally,an example is analyzed to verify the correctness and security of the scheme.

关 键 词：智能电网 电力终端 SM9算法 门限签名 安全认证 

分 类 号：TM76[电气工程—电力系统及自动化]