OPC现场总线安全代理研究

OPC fieldbus security proxy

设计了一种OPC现场总线安全代理方式,采用基于USBkey密钥存储及数字签名载体的X.509身份认证体系及3向鉴别认证方式,会话数据加密采用AES算法及密码分组链接CBC工作方式,保证了身份认证及数据传输的安全。采用客户端数据包截获的方式保证了OPC代理对原有用户程序的透明。

An OPC fieldbus security proxy was designed by using the X. 509 digital signature authentication system and the three-direction authentication method. The AES encryption algorithm and the cipher block chaining （CBC） were adopted for session encryption to ensure the authentication and data transmission security. The OPC agent is transparent to the original users because the client data was intercepted.