基于SM9的配电网Modbus报文安全性分析及改进

Security Analysis and Improvement of Modbus Message in Distribution Network Based on SM9

为了确保智能配电网系统中信息的安全,越来越多的密码算法被应用在通信工程中。针对基于SM2 的配电网Modbus 报文安全性研究,指出其易受重放攻击和篡改攻击,并有几处描述错误。为改进基于SM2 的方法,提出了一种适用于Modbus TCP(transmission control protocol)报文的基于国密算法SM9 标识算法的协议。首先介绍了SM9 数字签名过程,进而将其应用到Modbus TCP 报文通信中,并加入时戳机制,对改进的协议进行了安全性分析。最后,采用C 语言实现签名方案,并与几种签名方案进行效率比较。结果表明:改进后的协议不仅可以抵抗重放攻击和消息篡改攻击,保证报文通信过程中的数据完整性和来源可靠性,而且在运行效率方面具有较强的优势。

In order to ensure the information security in smart distribution network, more and more cryptographic algorithms are applied in the communication process. by SM2-based Modbus message security of distribution network was analyzed to find out such defects as its vulnerability to replay attack and tampering attack, and several other description errors. In order to improve this method, the authors in this paper propose a SM9-based protocol of identification algorithm suitable for Modbus TCP (transmission control protocol) message. At first, the process of SM9 digital signature is introduced, and then it is applied to Modbus TCP message communication added with the timestamp mechanism. And the security of the improved protocol is analyzed. Finally, the C language is used to realize the signature scheme, and its efficiency is compared with several other signature schemes. The results show that the improved protocol can not only resist replay attacks and tamper attacks, and ensure the data integrity and source reliability in the process of message communication, but also have a good advantage in running efficiency.