基于PKI体系的电力物资信息系统安全机制研究  

Research on security mechanism of power material information system based on PKI system

作　　者：王鹏 李松 豆科 王治豪 李珂 WANG Peng;LI Song;DOU Ke;WANG Zhihao;LI Ke(State Grid Shaanxi Electric Power Company,Xi’an 710061,China)

机构地区：[1]国网陕西省电力公司,陕西西安710061

出　　处：《电子设计工程》2023年第22期157-161,共5页Electronic Design Engineering

基　　金：国网陕西省电力公司2021年专项成本项目(SGSN0000WZWT1600442)。

摘　　要：针对传统安全机制缺乏动态管控、难以满足复杂系统安全需求等问题,提出了一种基于PKI体系的电力物资信息系统安全机制。该机制结合公钥基础设施(PKI)与授权管理基础设施(PMI)构建了PKI-PMI体系,从而解决了单一PKI体系无法实现权限管理的问题。同时,还设计了基于实体行为的可信度模型用于感知用户行为的动态变化,有效提高了用户信息的可靠性,并进一步保证了系统信息安全。实验结果表明,当每小时发生1000次网络攻击时,所提机制的安全性仍高于85%,且运行时间仅为15.28 ms,能够较好地保证电力物资信息系统的安全。Aiming at the problems that the traditional security mechanism lacks dynamic control and is difficult to meet the security requirements of complex systems,this paper proposes a security mechanism of power material information system based on PKI system.This mechanism combines Public Key Infrastructure(PKI)and Privilege Management Infrastructure(PMI)to build a PKI-PMI system,which solves the problem that a single PKI system can not realize authority management.At the same time,a credibility model based on entity behavior is designed to perceive the dynamic changes of user behavior,which effectively improves the reliability of user information and further ensures the security of system information.The experimental results show that when 1000 network attacks occur per hour,the security of the proposed mechanism is still higher than 85%,and the running time is only 15.28 ms,which can better ensure the security of power material information system.

关 键 词：安全机制 公钥基础设施 授权管理基础设施 PKI-PMI体系 可信度模型 感知用户行为 

分 类 号：TN918[电子电信—通信与信息系统]