基于PKI公钥体系的电力监控网络安全接入机制  

Security access mechanism based on PKI public key system for power monitoring network

作　　者：章熙 段金长 刘晓放 张洪略 ZHANG Xi;DUAN Jinchang;LIU Xiaofang;ZHANG Honglue(Power Dispatching and Control Center,Guizhou Electric Power Research Institute,Guiyang 550007,Guizhou,China;Department of Power Market System,Guodian Nari Nanjing Control System Co.,Ltd.,Nanjing 211106,Jiangsu,China)

机构地区：[1]贵州电力科学研究院电力调度控制中心,贵州贵阳550007 [2]国电南瑞南京控制系统有限公司电力市场系统部,江苏南京211106

出　　处：《沈阳工业大学学报》2024年第1期115-120,共6页Journal of Shenyang University of Technology

基　　金：贵州省科技计划项目重大专项(黔科合重大专项字[2018]3002)。

摘　　要：针对电力监控网络服务请求繁多、身份认证速度慢等网络拥塞问题,通过深入分析网络通信过程中数据泄漏发生原理,并基于PKI机制下的挑战响应模式对通信双方的密钥进行动态更新,利用哈希函数对用户身份在通信前做及时认证,设计了一种安全电力监控网络安全的接入体系,实现对网络节点的信息化控制。实验结果表明,所提的基于PKI机制的方案较传统基于对称机制的方案在牺牲少量计算代价的情况下,可实现通信数据高保密高可靠传输,在密钥协商的相互认证阶段本文花费的通信开销相较于对称机制节省约4%。Aiming at the problems of network congestion such as various service requests and slow authentication speed in power monitoring network,the principle of data leakage in the process of network communication was deeply analyzed,the secret keys of both sides of communication were dynamically updated according to the challenge-response mode under PKI mechanism,and the Hash function was used to timely authenticate the users′identity before communication.In addition,a secure power monitoring network was designed so that the network node was controlled by information technology.The experimental results show that the as-proposed scheme based on PKI mechanism can achieve the transmission with high security and high reliability for data communication at the expense of lower computing cost compared with the traditional scheme based on symmetric mechanism.In the mutual authentication phase of key agreement,the communication cost of this scheme is about 4% less than that of symmetric mechanism.

关 键 词：监控 电力网 动态密钥 相互认证 密钥更新 哈希函数 

分 类 号：TM632[电气工程—电力系统及自动化] TP311[自动化与计算机技术—计算机软件与理论]