摘要
在EPA控制网络中,为防止非法设备的物理接入而产生网络攻击的风险,提出了一种新的设备鉴别安全机制。该设备鉴别机制利用现场设备的惟一设备标识符、设备安全序列号以及本地时间戳,由哈希运算生成鉴别码,鉴别服务器通过比较鉴别码来判断现场设备是否为合法接入设备。对EPA控制网络的实际测试表明,该安全机制很好地保证了EPA控制网络的接入设备为合法设备,从而提高了EPA控制网络运行的安全性能。
Device authentication security mechanism in EPA is brought forward to reduce the risk of net attack, whicn comes irom the non-authorized devices connected with the EPA network. Device authentication security mechanism employs the unique device identifier; security serial number and time stamp to construct authentication code by hash function, and authentication server validates the device is authorized or not by comparing authentication code. After the practice testing in EPA network, it is obviously the security mechanism assures the validity of the device connection and increases the running security performance of EPA network.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第24期5877-5879,5902,共4页
Computer Engineering and Design
基金
国家863高技术研究发展计划基金项目(2003AA412030)
关键词
设备鉴别
鉴别码
设备标识符
安全序列号
时间戳
device authentication
authentication code
device identifier
security serial number
time stamp