面向台区智能终端的高强度商用密码安全管理方法研究  

Research on high-intensity commercial cryptographic security management methods for terminal intelligence in power distribution area

作　　者：江海朋 李延 袁艳芳 张磊 李琨 张彦杰 Jiang Haipeng;Li Yan;Yuan Yanfang;Zhang Lei;Li Kun;Zhang Yanjie(State Grid Key Laboratory of Power Industrial Chip Design and Analysis Technology,Beijing Smart-Chip Microelectronics Technology Co.,Ltd.,Beijing 100192,China)

机构地区：[1]北京智芯微电子科技有限公司国家电网公司重点实验室电力芯片设计分析实验室,北京100192

出　　处：《电子技术应用》2024年第8期54-59,共6页Application of Electronic Technique

基　　金：国家重点研发计划项目(2021YFB2401300)。

摘　　要：低压配电台区智能融合终端安全业务的处理集中在安全芯片中,包括密钥的存储与使用、与云侧端侧的身份认证、数据的加解密等。针对智能融合终端安全业务集中转发方案硬件成本过高、密钥管理复杂的问题,通过协议结构化设计和状态机轮询,提出了数据中断方式缓存与业务排队分发处理的方法,实现在一颗安全模块上多种安全业务的融合,融合方案充分利用了安全模块的空闲时间片,统一了不同业务的密钥管理,并通过功能和压力测试验证该方法的可行性和可靠性。达到了降本增效的目的,证明了配电台区智能融合终端安全业务融合技术上可行,经济上节约,业务上必要。The security services of the intelligent fusion terminal in the low-voltage distribution area are concentrated in the security chip,including the storage and use of keys,the identity authentication with the cloud side,and the encryption and decryption of data.Aiming at the problems of high hardware cost and complex key management in the centralized forwarding scheme of intelligent converged terminal security services,a method of data interrupt caching and service queuing distribution is proposed through the structured design of protocol and state machine polling,which realizes the fusion of multiple security services on one security module.The fusion scheme makes full use of the idle time slice of the security module.The key management of different services is unified,and the feasibility and reliability of this method is verified by functional and stress tests.It achieves the purpose of cost reduction and efficiency increase,and proves that the security service integration of intelligent fusion terminal in distribution station area is technically feasible,economically sparing and necessary in service.

关 键 词：融合终端 结构化设计 中断缓存 排队分发 多业务融合 

分 类 号：TP274[自动化与计算机技术—检测技术与自动化装置]