基于动态口令的配电网调度系统身份认证方案设计  

Design of identity authentication scheme for distribution network dispatching system based on dynamic password

作　　者：吴龙腾 王勇超 曾恺 黄伟杰 郭文鑫 WU Longteng;WANG Yongchao;ZENG Kai;HUANG Weijie;GUO Wenxin(Guangdong Power Grid Dispatching Control Center,Guangzhou 510600,China;Heyuan Power Supply Bureau of Guangdong Power Grid,Heyuan 517000,China;Jiangmen Power Supply Bureau of Guangdong Power Grid,Jiangmen 529000,China)

机构地区：[1]广东电网调度控制中心,广东广州510600 [2]广东电网河源供电局,广东河源517000 [3]广东电网江门供电局,广东江门529000

出　　处：《电子设计工程》2022年第20期132-136,共5页Electronic Design Engineering

基　　金：南方电网公司科技项目资助(036000KK52200014)。

摘　　要：为防止非法用户对配电网调度系统的恶意攻击,提出基于动态口令的配电网调度系统身份认证方案,确保配电网的安全稳定运行。采用挑战-应答协议生成动态口令,利用串空间模型优化该协议注册和登录阶段的约束条件,使其能够满足动态口令互认证的要求。口令生成后,在方案中融入失步调节机制,保证认证的高度同步性。通过Keyed MD5算法计算数据串的Hash值,获得客户端输入的散列值,将其与预存散列值对比,若二者一致,那么直接判定该用户为合法用户,反之则为非法用户。实验结果表明,所提方法的执行能力要优于传统方法且安全性能较高,实用性较强。In order to prevent illegal users from malicious attacks on distribution network dispatching system,a dynamic password based distribution network dispatching system identity authentication scheme is proposed to ensure the safe and stable operation of distribution network.The challenge-response protocol is used to generate the dynamic password,and the string space model is used to optimize the constraint conditions of the registration and login phases of the protocol,so that it can meet the requirements of dynamic password mutual authentication.After the password is generated,an out of step adjustment mechanism is incorporated into the scheme to ensure a high degree of synchronization of authentication.Calculate the hash value of the data string through the Keyed MD5 algorithm,obtain the Hash value input by the client,and compare it with the pre-stored hash value.If the two are consistent,the user is directly determined as a legitimate user,otherwise,it is an illegal user. Experimental results show that the execution ability of the proposed method is better than that of the traditional method,with higher safety performance and stronger practicability.

关 键 词：挑战-应答协议 失步调节机制 应答数验证 子口令修改 

分 类 号：TN99[电子电信—信号与信息处理] TP309.7[电子电信—信息与通信工程]