基于商用密码的水文物联网零信任系统设计及应用  

Design and Application of Zero-trust System for Hydrological Internet of Things Based on Commercial Cryptographic Algorithm

作　　者：沈凯华 徐路平 陈潇[3] 张政熠 SHEN Kaihua;XU Luping;CHEN Xiao;ZHANG Zhengyi(Zhejiang Management Center of Hydrology,Hangzhou 310009,Zhejiang,China;Zhejiang Ponshine Information Technology Co.,Ltd.,Hangzhou 311100,Zhejiang,China;Taizhou Hydrological Station,Taizhou 318000,Zhejiang,China)

机构地区：[1]浙江省水文管理中心,浙江杭州310009 [2]浙江鹏信信息科技股份有限公司,浙江杭州311100 [3]台州市水文站,浙江台州318000

出　　处：《浙江水利科技》2025年第2期95-99,共5页Zhejiang Hydrotechnics

基　　金：浙江省水利厅科技计划项目(RC2409)。

摘　　要：零信任作为当前网络安全行业的新一代理念,其关键在于打破默认的“信任”,对所有人、设备和系统持默认不信任的态度,基于身份认证和授权重新构建访问控制的信任基础。为解决当前浙江省水文行业感知体系的安全难题,设计了一套基于商用密码的水文物联网零信任系统,并成功在浙江省水文通信平台进行部署应用,主要针对浙江省水文物联网感知体系建立以可信身份为基础,进行持续信任评估、动态访问控制、用户行为分析等一系列的安全防护能力,有效提升了浙江省水文通信平台的安全性,保证水文物联网端到端的安全。As a new generation of concept in the current network security industry,the key to zero trust is to break the default“trust”,to adopt a default distrustful attitude towards all people,devices and systems,and to rebuild the trust foundation of access control based on identity authentication and authorization.In order to solve the current security problems of the perception system of the hydrological industry in Zhejiang Province,a zero-trust system for the hydrological Internet of Things based on commercial encryption was designed and successfully deployed and applied on the hydrological communication platform of Zhejiang Province.It mainly establishes a series of security protection capabilities such as continuous trust assessment,dynamic access control,and user behavior analysis based on trusted identity for the perception system of the hydrological Internet of Things in Zhejiang Province,which effectively improves the security of the hydrological communication platform in Zhejiang Province and ensures the end-to-end security of the hydrological Internet of Things.

关 键 词：零信任 可信接入 商用密码算法 水文物联网 

分 类 号：TP274[自动化与计算机技术—检测技术与自动化装置]