1.国网电子商务有限公司,北京 100053
2.武汉大学,湖北 武汉 430000
3.国家电网公司区块链技术实验室,北京 100031
4.北京信息科技大学,北京 100192
[ "赵丙镇(1971—),男,博士,高级工程师(教授级),从事物联网、区块链研究,E-mail:zhaobingzhen@sgec.sgcc.com.cn" ]
[ "王栋(1983—),男,硕士,高级工程师,从事区块链信息网研究,E-mail:wangdong@sgec.sgcc.com.cn" ]
[ "钱雪(1995—),女,硕士研究生,从事网络空间安全研究,E-mail:1062992975@qq.com" ]
[ "李军(1983—),男,通信作者,博士,副教授,从事网络安全、工业智能应用及安全防护研究,E-mail:lijun@bistu.edu.cn" ]
收稿:2021-01-13,
修回:2021-05-30,
纸质出版:2021-07-05
移动端阅览
赵丙镇, 王栋, 钱雪, 等. 基于区块链的电力物联网信任网关设计与实现[J]. 中国电力, 2021,54(7):192-197.
Bingzhen ZHAO, Dong WANG, Xue QIAN, et al. Design and Implementation of Blockchain-based Trust Gateway for Power Internet of Things[J]. Electric power, 2021, 54(7): 192-197.
赵丙镇, 王栋, 钱雪, 等. 基于区块链的电力物联网信任网关设计与实现[J]. 中国电力, 2021,54(7):192-197. DOI: 10.11930/j.issn.1004-9649.202101057.
Bingzhen ZHAO, Dong WANG, Xue QIAN, et al. Design and Implementation of Blockchain-based Trust Gateway for Power Internet of Things[J]. Electric power, 2021, 54(7): 192-197. DOI: 10.11930/j.issn.1004-9649.202101057.
为保障大电网安全,解决电力物联网复杂通信网络中网关抗攻击能力弱、设备集中式接入认证方式导致认证中心负荷大、效率低、存在安全隐患等问题,提出了一种基于区块链的分布式动态网关架构以及接入认证机制。将区块链的共识机制运用到主网关的动态切换过程,形成了分布式的动态网关结构;结合门限秘密共享算法提出一种可信、灵活的分布式接入认证方式,并将接入认证过程中所涉及的设备ID等数字信息存入区块链数据存储结构中以提高认证过程的安全性。为了从理论和实践上说明该方法的有效性,进行了安全性分析与实验。结果表明,所提出的动态网关架构可以抵御物联网常见攻击,接入认证机制可以为电力物联网设备提供高度安全的接入认证保障。
In order to ensure the cyber security of bulk power system
a distributed dynamic gateway architecture based on blockchain and access authentication mechanism is proposed regarding the vulnerabilities of gateway to cyberattacks in the complex communication network of power Internet of Things
as well as the problems of heavy loading
low efficiency and potential security risks caused by the equipment access authentication mode in the centralized platform. The consensus mechanism of blockchain is applied to the dynamic switching process of the main gateway to form a distributed dynamic gateway structure. The device ID and other digital information involved in the access authentication process are stored in the blockchain data storage structure to improve the data security in the authentication process. To demonstrate the effectiveness of the method in theory and practice
security analysis and experiments are carried out. The results show that the proposed dynamic gateway architecture can boost the resistance to the general attacks of the Internet of Things. The access authentication mechanism can also provide access authentication assurance with high security for power Internet of Things devices.
ATSUYA Y, AYED S B, TERAOKA F. Network access authentication infrastructure using EAP-TTLS on diameter EAP application[C]//Proceedings of the 7th Asian Internet Engineering Conference on - AINTEC '11. Bangkok, Thailand: ACM Press, 2011: 56-63.
CHIANG M, ZHANG T. Fog and IoT: an overview of research opportunities[J]. IEEE Internet of Things Journal, 2016, 3(6): 854–864.
YAO Y Y, CHANG X L, MIŠIĆ J, et al . BLA: blockchain-assisted lightweight anonymous authentication fordistributed vehicular fog services[J ] . IEEE Internet of Things Journal, 2019, 6(2): 3775–3784.
GRØNBÆK I. Architecture for the Internet of Things (IoT): API and interconnect[C]//2008 Second International Conference on Sensor Technologies and Applications (sensorcomm 2008). Cap Esterel, France: IEEE, 2008: 802-807.
LI Cunbin, LI Xiaopeng, TIAN Shiming, et al . Challenges and prospects of risk transmission in deep fusion of electric power and information for energy Internet[J ] . Automation of Electric Power Systems, 2017, 41(11): 17–25.
DE CALDAS FILHO F L, MARTINS L M C E, ARAÚJO I P, et al. Design and evaluation of a semantic gateway prototype for IoT networks[C]//Companion Proceedings of the10th International Conference on Utility and Cloud Computing. New York, USA: ACM, 2017: 195-201.
SULTAN A, MUSHTAQ M A, ABUBAKAR M. IOT security issues via blockchain: a review paper[C]//Proceedings of the 2019 International Conference on Blockchain Technology. New York, USA: ACM, 2019: 60-65.
WANG Zhongchun, FAN Guolin, et al . Technology implementation of IoT security gateway based on lightweight security protocol[J ] . Communications Technology, 2020, 53(2): 469–473.
FENG T, CHEN W Y, ZHANG D, et al. One-stop efficient PKI authentication service model based on blockchain[M]. Singapore: Springer Singapore, 2020: 31-47.
FAROOQ S M, SUHAIL HUSSAIN S M, USTUN T S. Elliptic curve digital signature algorithm (ECDSA) certificate based authentication scheme for advanced metering infrastructure[C]//2019 Innovations in Power and Advanced Computing Technologies (i-PACT). Vellore, India: IEEE, 2019: 1-6.
BEHESHTI-ATASHGAH M, AREF M R, BAYAT M, et al. ID-based strong designated verifier signature scheme and its applications in Internet of Things[C]//2019 27th Iranian Conference on Electrical Engineering (ICEE). Yazd, Iran: IEEE, 2019: 1486-1491.
HAN S, XIE M D, YANG B L, et al . A certificateless verifiable strong designated verifier signature scheme[J ] . IEEE Access, 2019, 7: 126391–126408.
HE Yongyuan, PANG Jin. Application prospect of block chain technology in electric power industry[J]. Electric Power Information and Communication Technology, 2018, 16(3): 39–42.
FAN Jingang, WEI An, GUO Yanlai, et al . Architecture of energy micro grid based on block chain[J ] . Electric Power Information and Communication Technology, 2018, 16(12): 9–13.
ZENG Zeng, ZHANG Li, MEI Wenming, et al . A blockchain-based smart power grid system[J ] . Electric Power Information and Communication Technology, 2019, 17(1): 31–35.
LEE S, HEO M, PARK K, et al. Enhancing the security of IoT gateway based on the classification of user security-sensitive data[C]//Proceedings of the Conference on Research in Adaptive and Convergent Systems. Chongqing China. New York, USA: ACM, 2019: 241-243.
CHRISTIN D, REINHARDT A, MOGRE P S, et al. Wireless sensor networks and the Internet of Things: Selected challenges[EB/OL]. 2009.
IBRAHIM M H. SecureCoin: a robust secure and efficient protocol for anonymous bitcoin ecosystem[J]. nternational Journal of Network Security, 2017, 19(2): 295–312.
TOMESCU A, DEVADAS S. Catena: efficient non-equivocation via bitcoin[C]//2017 IEEE Symposium on Security and Privacy (SP). San Jose, USA: IEEE, 2017: 393-409.
LEI A, CRUICKSHANK H, CAO Y, et al . Blockchain-based dynamic key management for heterogeneous intelligent transportation systems[J ] . IEEE Internet of Things Journal, 2017, 4(6): 1832–1843.
HE Y H, LI H, CHENG X Z, et al . A blockchain based truthful incentive mechanism for distributed P2P applications[J ] . IEEE Access, 2018, 6: 27324–27335.
ZYSKIND G, NATHAN O, PENTLAND A '. Decentralizing privacy: using blockchain to protect personal data[C]//2015 IEEE Security and Privacy Workshops. San Jose, USA: IEEE, 2015: 180-184.
CHRISTIDIS K,DEVETSIKIOTIS M. Blockchains and smart contracts for the internet of things[J]. IEEE Access, 2016, 4: 2292–2303.
MENDKI P. Blockchain enabled IoT edge computing[C]//Proceedings of the 2019 International Conference on Blockchain Technology. New York, USA: ACM, 2019: 66-69.
ALEXOPOULOS N, VASILOMANOLAKIS E, IVÁNKÓ N R, et al. Towards blockchain-based collaborative intrusion detection systems[M]. Cham: Springer International Publishing, 2018: 107-118.
0
浏览量
0
下载量
3
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621