基于量子安全的电力信息系统安全增强方法研究  

Research on the security enhancement for power information systems based on quantum security

作　　者：彭飞 田增垚 张晓华 安天瑜 孟庆东 陈志奎[2] PENG Fei;TIAN Zengyao;ZHANG Xiaohua;AN Tianyu;MENG Qingdong;CHEN Zhikui(Northeast Branch of State Grid Corporation of China,Shenyang 110180,P.R.China;School of Software,Dalian University of Technology,Dalian 116620,Liaoning,P.R.China)

机构地区：[1]国家电网有限公司东北分部,沈阳110180 [2]大连理工大学软件学院,辽宁大连116620

出　　处：《重庆大学学报》2024年第2期62-74,共13页Journal of Chongqing University

基　　金：国家自然科学基金面上资助项目(62076047);国家电网有限公司科技项目(52992620000B)。

摘　　要：电力系统是国家发展的重要基石,电力信息系统的安全必须得到保障。现有电力信息系统的安全主要基于RSA等加密算法,面临互联网算力提升和量子计算机的威胁。根据电力系统对信息安全的迫切需求,以及量子保密通信技术在信息安全领域中的无条件安全性,探索量子保密通信技术在电力信息系统中的应用。通过对作为互联网信息技术基础的标准SSL协议过程及其安全要素解析,设计了同互联网基础相容的量子安全增强方法——利用预置量子随机数(基于量子随机数发生设备、量子密钥分发网络)进行随机数源强化,在开源OPENSSL VPN平台上进行相应实验验证。实验结果表明,提出的利用量子随机数源进行量子化改造的方案能实现系统安全的根本性改善,同时不显著增加系统复杂度或系统开销,对电力信息系统安全实现增强。Power systems are fundamental to state development,and measuring the security of the power information system is crucial.In existing power information systems,most security methods rely on encryption algorithms like RSA algorithm,which face growing threats from the increasing computing power of the Internet and quantum computers.With recognizing the urgent need for information security in power systems and the unconditional security offered by quantum communication,this paper explores the application of quantum security communication in power information systems.Specifically,through a detailed analysis of the procedure and security factors of the standard SSL protocol,this paper proposes a security enhancement method that is compatible with existing Internet protocol foundations.The proposed method enhances the source of random numbers by incorporating preset quantum random numbers,based on either a quantum random number generator or a quantum key distribution network.Implemented on the OPENSSL VPN evaluation platform,experiments show that the proposed security enhancement method can improve the security level of power information systems without significantly increasing system complexity or cost.

关 键 词：量子保密通信 安全增强 SSL协议 

分 类 号：TP333[自动化与计算机技术—计算机系统结构]