智能电网中用电信息安全防护认证加密系统研究  

Research on authentication and encryption system of electricity information security protection in smart grid

作　　者：唐振营 王晨飞 李慧芹 Tang Zhenying;Wang Chenfei;Li Huiqin(Information Operation and Maintenance Center,State Grid Customer Service Center,Tianjin,300309,China)

机构地区：[1]国网客服中心信息运维中心,天津300309

出　　处：《机械设计与制造工程》2023年第10期121-125,共5页Machine Design and Manufacturing Engineering

摘　　要：为保障智能电网安全运营,分析了用电信息采集系统中主站层、通信信道层及采集设备层各层的安全风险,并基于“可信终端—可信传输—可信指令”的可信链构建思路,设计了一种融合可信终端、BIMP安全认证协议、HSCT硬件信号确认技术的用电信息双向交互认证加密系统。系统以TCM芯片为可信根,构建了信任链,将信任关系融入系统的所有构件,以此进一步构建了可信链智能终端,让接入主站层的用电信息满足各业务系统的安全防护要求;对WAPI、HSMA认证协议缺乏密钥保护、安全性差以及加密技术运算量大的问题,引入了融合优先级控制、协议过滤及双向身份认证的BIMP认证协议,实现了用电信息的传输信号安全加密。To ensure the safe operation of smart grid,it designs a two-way interactive authentication and encryption system of the power information,which integrates the trusted terminal and BIMP security authentication protocol,It develops HSCT hardware signal confirmation technology based on the analysis of the security risks of the main station,describes the communication layer and collection terminal layers in the system.Based on the construction idea of"trusted terminal trusted transmission trusted instruction"trusted chain,the system takes TCM chip as the trusted root,builds the trust chain,and integrates the trust relationship into all components of the system,so as to build the intelligent terminal of the trust chain.The power consumption information connected to the master station layer can meet the security protection requirements of each business system.In view of the problems of WAPI and HSMA authentication protocol lack of secret key protection,poor security and large amount of encryption technology computing,the introduction of financial BIMP authentication protocol combining priority control,protocol filtering and two-way identity authentication is used to realize the transmission signal security encryption of power consumption information.

关 键 词：用电信息系统 可信终端 BIMP协议 安全防护 

分 类 号：TN918.4[电子电信—通信与信息系统]