基于SM2密码体系的电网信息安全支撑平台开发

发布时间：2018-03-08 07:33

本文选题：电力二次系统　切入点：SM算法　出处：《电力系统自动化》2014年06期 　论文类型：期刊论文

【摘要】：针对电力二次系统安全防护体系缺乏集中管理和审计,且现有的安全体系公钥算法均采用RSA算法的现状,提出了基于国产SM2密码体系的安全支撑平台的设计和实施方案。分析了安全支撑平台应用SM2算法存在的问题,提出了一个采用组件技术构建自行研制的安全加密通道的方案,使得安全支撑平台能支持实现SM2算法,并对集成整合后的安全支撑平台的应用功能进行了测试分析。结果表明,该平台可以实现电力二次系统应用之间的无缝整合,使它们相互间形成一个有机整体,提供安全的身份认证、有效的访问控制与权限管理、安全审计日志记录,并对用户信息及系统资源进行管理服务,实现对用户身份和访问权限的集中管理和控制。该平台已在某省级电网正式投运,得到了实际工程应用的验证。
[Abstract]:In view of the lack of centralized management and audit of the security protection system of the secondary power system, the existing public key algorithm of the security system adopts the RSA algorithm. This paper presents the design and implementation of a security support platform based on domestic SM2 cryptosystem, analyzes the problems existing in the application of SM2 algorithm in the security support platform, and puts forward a scheme to construct a self-developed secure encryption channel by using component technology. The security support platform can support the implementation of SM2 algorithm, and the application function of the integrated security support platform is tested and analyzed. The results show that the platform can realize seamless integration between power secondary system applications. Make them form an organic whole, provide secure identity authentication, effective access control and authority management, security audit log records, and the management of user information and system resources, The platform has been formally put into operation in a provincial power network and has been verified by practical engineering applications.
【作者单位】：东南大学电气工程学院;无锡市信息安全工程技术研究中心;
【基金】：国家发改办高技(〔2012〕1424)国家信息安全专项“基于国产加密芯片的加密U盘及其软件系统” 江苏省经信委综合(〔2011〕1178)资助项目“加密存储介质及其软件系统的研发和应用” 无锡市2012科技支撑项目(CGE01G1211)~~
【分类号】：TM76

【参考文献】