基于密码芯片的SSL嵌入化实现

Implementation of SSL Embedding Based on Cipher Chip

风电场监控通信是基于TCP/IP的,存在易于被未授权的用户窃听、篡改和进行其他非法操作的通信安全问题。针对该情况,根据IEC 62351-3标准,提出一种采用SSL的解决方案。对于风电场通信安全组件的嵌入式环境,采用MatrixSSL实现SSL的嵌入化。依据国家商用密码管理条例的要求,SSL中的密码计算采用密码芯片实现,并开发了密码芯片的COS程序和应用程序接口。

Monitoring and control communication in wind farms based on TCP/IP have communication security problems such as easily being wiretaped, tampered and used to do other illegal operation by illegal users. The solution of using SSL is proposed according to the standard IEC 62351-3. Aiming at the embedded environment of wind farm secure communication module, the embedding of SSL is implemented by the use of MatrixSSL. In accordance with regulations on the commercial passwords of the state, the cipher computing in SSL is realized by adopting of cipher chip, and COS program together with application programming interface of cipher chip are developed.