基于SM2密码算法的电力数据安全接入方法  

Security access method for power data based on SM2 cryptographic

作　　者：王高洲 王惠剑 王聪 李贝贝 Wang Gaozhou;Wang Huijian;Wang Cong;Li Beibei(Information and Telecommunications Company,State Grid Shandong Electric Power Company,Jinan 250001,China;School of Cyber Science and Engineering,Sichuan University,Chengdu 610065,China)

机构地区：[1]国网山东省电力公司信息通信公司,山东济南250001 [2]四川大学网络空间安全学院,四川成都610065

出　　处：《南京理工大学学报》2022年第6期749-755,共7页Journal of Nanjing University of Science and Technology

基　　金：国家自然科学基金(62002248);中国博士后科学基金(2019TQ0217,2020M673277)。

摘　　要：为了保证电力数据的机密性、真实性和完整性,该文提出了一种新的电力数据安全接入方法。设计了一个基于SM2椭圆曲线数字签名算法和SM4分组密码算法的混合密码系统。异构边缘设备采集的数据被加密、签名,在经身份认证后由聚合节点转发到控制中心。每个边缘设备需约1.5 ms的计算开销,用来定期收集终端的电力数据并汇报给聚合节点,并执行1次SM4对称加密操作和1次SM2数字签名操作。该文方法生成公私钥仅需约3 ms。在相同安全级别下,在生成公私钥的计算开销方面,SM2的计算开销远小于RSA。通过安全性分析和仿真实验证明了该文方法可以防御多种面向电力数据的网络攻击,具备较高的传输效率。In order to ensure the confidentiality,authenticity and integrity of power data,a security access method of power data is proposed here.A hybrid cryptosystem based on SM2 elliptic curve digital signature algorithm and SM4 block cipher algorithm is designed.The data collected by heterogeneous edge devices are encrypted and signed,and then forwarded to the control center by the aggregation node after authentication.Each edge device requires about 1.5 ms of computing overhead,which is used to periodically collect terminal power data and report it to the aggregation node,and perform one SM4 symmetric encryption operation and one SM2 digital signature operation.This method only takes about 3 ms to generate public and private keys.At the same security level,SM2 has much less computational overhead than Rivest-Shamir-Adleman(RSA)in generating public and private keys.Security analysis and simulation experiments show that this method can defend against various network attacks facing power data,and has high transmission efficiency.

关 键 词：电力数据 SM2 椭圆曲线数字签名算法 SM4 分组密码算法 异构边缘设备 身份认证 计算开销 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]