一种高效的GOOSE报文完整性认证方法

发布时间：2018-01-06 00:07

本文关键词：一种高效的GOOSE报文完整性认证方法　出处：《电力系统自动化》2017年02期 　论文类型：期刊论文

【摘要】：当前主流研究采用HASH信息验证码(HMAC)认证方法保障面向通用对象的变电站事件(GOOSE)报文的完整性,但分析发现HMAC对经典的GOOSE这类短报文来说效率并不高。设计一种直接采用密钥和顺序调整后的报文作为HASH函数输入的GOOSE报文认证方法,利用GOOSE报文显性长度域、统一报文格式和时序性等属性,降低碰撞攻击和避免长度扩展攻击、重放攻击等风险;将GOOSE心跳报文的时变内容置于待认证报文末端,可重复利用同系列心跳报文中相同内容的HASH压缩运算的中间结果。嵌入式平台验证结果表明算法的高效性。
[Abstract]:The current mainstream research uses HASH information verification code HMAC-based authentication method to protect the integrity of the general-purpose object oriented substation event (GOOSE) message. But it is found that HMAC is not efficient to the classical short message such as GOOSE. This paper designs a GOOSE message authentication which directly uses key and sequence adjustment as the input of HASH function. Method. In order to reduce the risk of collision attack and length expansion attack and replay attack, the GOOSE message explicit length domain is used to unify the message format and timing. The time-varying content of the GOOSE heartbeat message is placed at the end of the authentication message. The intermediate results of HASH compression operations with the same contents in the same series of heartbeat packets can be reused. The verification results of the embedded platform show that the algorithm is efficient.
【作者单位】：华南理工大学电力学院;深圳供电局有限公司;
【基金】：国家自然科学基金资助项目(51477057)~~
【分类号】：TM63;TM73
【正文快照】： 上网日期:2016-09-09。0引言随着智能电网深入发展和广泛应用,作为智能电网基础性支撑的电力通信网络,从独立的封闭系统逐步发展为广域互联的开放系统,电力信息由原来相对狭小的信息“孤岛”扩展到更大的范围,新版IEC 61850协议涵盖了站站、站控、配电和分布式能源、水电、风

【相似文献】