面向用电信息采集系统的双向认证协议

发布时间：2018-03-13 16:33

本文选题：用电信息采集　切入点：数字签名　出处：《电网技术》2014年09期 　论文类型：期刊论文

【摘要】：用电信息采集系统涉及计费信息、居民用电隐私等核心数据,对数据的产生、传输及存储等方面具有较高的保密性、完整性和可用性需求。基于国家电网公司的认证授权(certificate authority,CA)系统,利用数字签名和挑战应答思想,并结合MAC动态密钥协商及签名校验,提出一种适用于用电信息采集系统的双向认证协议。利用非形式化方法和基于有色Petri网理论的形式化分析方法对提出的协议进行了状态转移分析和安全性论证,证明该协议在能够成功达到预期运行状态的前提下满足多重认证、前向安全及后向安全等安全属性,此外该协议能够在有效抵抗伪造、恶意重放及去同步攻击的情况下实时高效地完成实体认证和动态密钥协商。最后,对该协议在用电信息采集系统中的适用性及有效性进行了分析。
[Abstract]:The power information collection system involves the core data, such as charging information, residential power privacy and so on. It has a high confidentiality to the generation, transmission and storage of the data. Integrity and availability requirements. Based on the State Grid Corporation's Authentication Authorization Certificate system, using digital signatures and challenge response ideas, combined with MAC dynamic key agreement and signature verification, This paper presents a bidirectional authentication protocol for electrical information collection system, and analyzes the state transition and security of the proposed protocol by using the non-formal method and the formal analysis method based on colored Petri net theory. It is proved that the protocol can satisfy the security attributes of multiple authentication, forward security and backward security on the premise that the protocol can successfully reach the expected running state. In addition, the protocol can resist forgery effectively. In the case of malicious replay and desynchronization attack, entity authentication and dynamic key agreement are completed in real time and efficiently. Finally, the applicability and effectiveness of the protocol in electrical information acquisition system are analyzed.
【作者单位】：中国电力科学研究院;北京邮电大学自动化学院;
【基金】：国家重点基础研究发展计划项目(973计划)(2012CB724400)~~
【分类号】：TM76;TN918.4

【相似文献】