基于HSA技术的IEC104协议安全设计方案

以电力行业广泛使用的IEC104协议为研究对象,对该协议的报文结构进行分析并找出其存在的安全隐患和漏洞;提出增加安全信息控制字段,对核心数据进行加密处理,形成安全通信协议APDUSec;在不改变原有传输模式下,采用了RSA加密算法和HMAC认证算法,确保了协议的保密性、完整性和不可否认性;为解决电力通信系统中存在的通信链路故障,借助HSA技术来解决环路检测和分片安全问题.仿真测试结果表明:APDUSec在一定程度上能有效满足信息保密与身份认证的需要,HSA技术在检测环路、传输效率等方面具有一定的优势.本文结果对IEC104协议运行的安全性和可靠性研究具有一定的参考价值.

Security Design Scheme of IEC104 Protocol Based on HSA Technology

After analyzing the message structure in IEC104 protocol, a security message assumption was proposed, which added the security information control field, the core data was encrypted and formed the security communication protocol APDUSec. The protocol maintained confidentiality, integrity, and non-repudiation using the RSA encryption algorithm and HMAC authentication algorithm, all without altering the original transmission mode. Furthermore, in order to solve the communication link problem about loop detection and piecewise security, HSA technology was implemented. The test results of simulation platform showed that APDUSec could effectively meet the needs of information security and identity verification to a certain extent, and HSA technology had certain advantages in loop detection, transmission efficiency and so on. The scheme has certain reference value for the research of security and reliability of IEC104 protocol.