基于SM2的配电网Modbus报文安全性研究

Modbus telegram security of distribution network based on SM2

配电网信息系统采用国产安全算法,能避免国外算法可能存在的后门陷阱。提出一种应用于配电网Modbus报文的国密SM2安全方法。研究配电网信息系统的特点,分析非对称加密算法的特点以及国密算法SM2在配电网Modbus报文的适用性。采用SM2进行配电网信息系统的密钥在线管理,进而重点研究采用国密SM2算法对配电网Modbus报文进行数字签名,保证配电网信息的真实性和不可抵赖性。搭建实验平台测试基于SM2的密钥管理和配电网MODBUS报文交换情况。测试结果表明基于SM2的配电网信息系统能同时满足安全性和实时性要求。

Distribution network information system uses domestic security algorithm, avoiding the possible back door trap that may exist in foreign algorithms. A national cryptographic algorithm SM2 for Modbus telegrams in distribution networks is proposed. The characteristics of distribution network information system are studied. The characteristics of the asymmetric encryption algorithm and the applicability of the national cryptographic algorithm SM2 in the distribution network Modbus are analyzed. On-line key management of distribution network information system based on SM2 is adopted. Digitally signing Modbus telegrams of distribution network based on SM2 to ensure the authenticity and non-repudiation of distribution network information are elaborated. The experimental platform to test the SM2-based key management and distribution network Modbus telegram exchange is set up. The test results show that the SM2-based distribution network information system can meet the security and real-time requirements at the same time.