一种标识互信认证的设备终端安全接入新方法  

A new method for secure access of equipment terminals with mutual trust authentication

作　　者：罗合 陈鸿祥 吴美琪[1] LUO He;CHEN Hongxiang;WU Meiqi(China Yangtze Power Co.,Ltd.,Wuhan 430014,China)

机构地区：[1]中国长江电力股份有限公司,湖北武汉430014

出　　处：《粘接》2024年第7期144-146,151,共4页Adhesion

基　　金：中国长江电力股份有限公司项目(项目编号:Z162202009)。

摘　　要：为解决电力监控调度网络中存在的安全接入认证控制、交互难的问题,提出了一种基于标识互信认证的网络设备终端安全接入新方法。对电力监控与调度终端进行安全初始化,配置安全接入IP地址,并将带有自身硬件序列号信息的加密数据上传至局端设备;局端设备对接收到的电力监控与调度终端的硬件序列号进行解密,在增加路由信息后将数据传输至安全接入平台。安全接入平台采用标识互信认证技术,对电力监控与调度终端的硬件序列号进行识别,验证电力监控与调度终端的合法性。在某省电力监控与调度系统中进行实例运行,其结果验证了所提方法的有效性。In order to solve the problems of secure access,authentication,control and interaction in power monitoring and dispatching network,a new method of secure access to network equipment terminals based on identity mutual trust authentication was proposed.Security initialization on the power dispatch terminal was performed,a secure access IP address was configured,and encrypted data with its own hardware serial number information was uploaded to the office equipment.The office equipment decrypted the hardware serial number of the received power dispatch terminal and transmits the data to the secure access platform after adding routing information.The secure access platform used identification and mutual trust authentication technology to identify the hardware serial number of the power dispatch terminal and verify its legitimacy.An example was carried out in a provincial power dispatch system,and the results verified the effectiveness of the proposed method.

关 键 词：标识互信认证 网络设备终端 安全接入 路由信息 电力监控与调度系统 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] TM73[自动化与计算机技术—计算机科学与技术]