电力巡线无人机信息安全风险分析与防护

Cyber security defense of unmanned aerial vehicle in power utilities

针对电力行业大量采用民用消费级无人机进行输电线路巡线可能存在的信息安全隐患展开风险分析。首先,结合无人机实时性要求高、通信链路不稳定、GPS导航信号易篡改和飞航路径需保密等特点,指出应用专业级无人机进行输电线路巡线需要解决的信息安全问题。接着提出无人机及地面控制系统中基于对称密钥的控制信号、航拍数据加密通信与存储、密钥分发机制和基于无人机惯性导航系统的虚构GPS信号综合评估与甄别方法,以及基于云安全的无人机恶意软件检测的加固措施,所提方法为专业级巡线无人机的信息安全提供保障。

The paper performs the risk analysis of potential cybersecurity problems in residential consumer unmanned aerial vehicles(UAVs)adopted by power utilities for the transmission line inspection.Considering the real-time requirement,unstable communication links,easy-to-tamper GPS navigation signal,and flight path confidentiality,the paper shows the cybersecurity matters in applying professional UAVs for the transmission line inspection.After that,the paper proposes the evaluation and screening method in UAVs and ground control systems for falsified GPS signals,which is based on the symmetric encryption control signal,encrypted communication and storage of aerial data,key distribution mechanism,and inertial guidance system in UAVs.Moreover,the cloud security malware-detection-based reinforcement measure is also proposed.The proposed method and measure ensure the cybersecurity of professional patrol UAVs.