中国电力科学研究院有限公司, 北京市 海淀区,100192
纸质出版:2025
移动端阅览
冯云, 1, 卢和平, 等. 海量电力物联终端接入场景下的轻量化安全认证方法与应用机制[J]. 电网技术, 2025,49(12):5282-5291.
FENG Yun, 1, LU Heping, et al. Lightweight Security Authentication Method and Application Mechanism in the Scenario of Massive Power IoT Terminal Access[J]. 2025, 49(12): 5282-5291.
冯云, 1, 卢和平, 等. 海量电力物联终端接入场景下的轻量化安全认证方法与应用机制[J]. 电网技术, 2025,49(12):5282-5291. DOI: 10.13335/j.1000-3673.pst.2024.1668.
FENG Yun, 1, LU Heping, et al. Lightweight Security Authentication Method and Application Mechanism in the Scenario of Massive Power IoT Terminal Access[J]. 2025, 49(12): 5282-5291. DOI: 10.13335/j.1000-3673.pst.2024.1668.
数字电网时代,信息流决定能源流,网络安全风险日益凸显。资源受限的电力物联终端作为电网末端接入节点,安全防护普遍薄弱,极易成为黑客攻击电网的跳板。终端设备的安全认证是保障其安全接入的重要前提。然而,当前基于数字证书的主流安全认证机制对资源要求较高,无法兼顾物联终端轻量、高效的认证要求。文章基于我国国产商用密码算法,通过分布式哈希表与高性能数据缓存设计,提出了一种基于轻量级数字证书结构的证书可信性快速映射算法,并据此设计了支持大规模终端接入的轻量级数字证书生成、申请、验证和撤销全流程安全认证机制,不仅大幅降低了传统数字证书对设备的资源占用,更有效提升了电力物联终端高并发安全认证效率。综合仿真试验与试点验证结果分析得出,文章方法在合规、有效实现终端安全接入的基础上,证书存储资源占比降低超93%,证书申请、验证与撤销时间平均降低8.3%、11.7%与6.2%,可有效解决海量异构终端高效安全认证难题,提升电力网络安全水平,支撑我国数字电网的高质量发展。
In the era of digital grid
information flow determines energy flow
and network security risks are increasingly prominent. The power IoT terminals with limited resources
as the end access nodes of the power grid
generally have weak security protection and are prone to becoming a springboard for hackers to attack the power grid. The security authentication of terminal devices is an important prerequisite for ensuring their secure access. However
the current mainstream security authentication mechanisms based on digital certificates have high resource requirements and cannot meet the lightweight and efficient authentication requirements of IoT terminals. This article proposes a certificate trustworthiness fast mapping algorithm based on a lightweight digital certificate structure using a distributed hash table and high-performance data caching design
based on domestically produced commercial cryptographic algorithms in China. Based on this
a lightweight digital certificate generation
application
verification
and revocation full process security authentication mechanism is designed to support large-scale terminal access. This not only significantly reduces the resource occupation of traditional digital certificates on devices
but also effectively improves the high concurrency security authentication efficiency of power IoT terminals. Based on the analysis of comprehensive simulation experiments and pilot verification results
the method proposed in this paper reduces the proportion of certificate storage resources by over 93% while ensuring compliance and effective implementation of terminal security access. The average time for certificate application
verification
and revocation is reduced by 8.3%
11.7%
and 6.2%
respectively. This method can effectively solve the problem of efficient security authentication for a large number of heterogeneous terminals
improve the security level of the power network
and support the high-quality development of China's digital power grid.
0
浏览量
532
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621